{"id":"CVE-2026-33563","kind":"vulnerability","aliases":["CVE-2026-33563"],"related":[],"title":"Intel Platform Monitoring Technology: local user can read sensitive data","description":"Exposure of sensitive information to an unauthorized actor for some Intel(R) Platform Monitoring Technology (Intel(R) PMT) software before version 3.2.0.22 within Ring 3: User Applications may allow an information disclosure. System software adversary with an authenticated user combined with a low complexity attack may enable data exposure. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (low), integrity (none) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.","summary":"Some Intel Platform Monitoring Technology software before 3.2.0.22 lets a local user-space application read information it should not reach. An attacker with an authenticated local account can expose data with low confidentiality impact and no integrity or availability impact.","severity":"medium","cvss":4.8,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["infrastructure","intel","linux","pmt","servers","windows"],"not_affected_if":["no-local-accounts","no-pmt-software"],"how_to_check":"- Check the installed Intel Platform Monitoring Technology (PMT) software version against `3.2.0.22`","fix":"- Intel Platform Monitoring Technology (PMT) software: move to `3.2.0.22` or later","status":"open","published_at":"2026-11-10T17:17:41+00:00","first_seen_at":"2026-11-10T17:22:42+00:00","triaged_at":"2026-11-10T17:25:45+00:00","updated_at":"2026-11-10T17:25:45+00:00","category":"infrastructure","confidence":0.6,"triage":{"at":"2026-11-10T17:25:45Z","model":"claude-haiku-5-5","output":{"fix":"- Intel Platform Monitoring Technology (PMT) software: move to `3.2.0.22` or later","reach":"local","title":"Intel Platform Monitoring Technology: local user can read sensitive data","impact":"low","summary":"Some Intel Platform Monitoring Technology software before 3.2.0.22 lets a local user-space application read information it should not reach. An attacker with an authenticated local account can expose data with low confidentiality impact and no integrity or availability impact.","audience":"businesses","category":"infrastructure","nicknames":[],"who_cares":["intel","pmt","linux","windows","servers"],"confidence":0.6,"fix_status":"available","needs_auth":"yes","worst_case":"Local user reads sensitive data from monitoring software","analyst_note":"","how_to_check":"- Check the installed Intel Platform Monitoring Technology (PMT) software version against `3.2.0.22`\n- unknown for other commands; the sources do not name a file or command","plain_action":"","product_name":"","needs_analyst":false,"not_affected_if":["no-pmt-software","no-local-accounts"],"who_is_affected":"Systems that run Intel Platform Monitoring Technology software below 3.2.0.22 are exposed, and the attacker must already have a local user account on the machine. Machines without this software, and machines where only trusted administrators have local logins, carry less risk. The sources do not say which products or platforms ship it.","user_interaction":"no","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"unknown"},"cost_usd":0.000731,"input_tokens":4678,"output_tokens":526,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-2026':12A,15A '-33563':13A,16A '3':88C '3.2.0.22':30B,85C 'access':120C 'account':50B 'actor':71C 'adversari':98C 'allow':92C 'applic':37B,90C 'attack':45B,108C,122C 'authent':48B,101C 'avail':62B,147C,162C 'combin':103C 'complex':107C 'confidenti':56B,142C,157C 'cve':11A,14A 'data':10A,53B,111C 'disclosur':95C 'enabl':110C 'expos':52B 'exposur':64C,112C 'impact':57B,63B,140C,164C 'inform':39B,67C,94C 'infrastructur':17B 'integr':60B,144C,159C 'intel':1A,18B,24B,74C,79C 'interact':135C 'intern':129C 'knowledg':130C 'let':31B 'linux':19B 'local':5A,33B,49B,119C 'low':55B,106C,143C 'may':91C,109C,115C,139C 'monitor':3A,26B,77C 'none':145C,148C,158C,160C,163C 'occur':117C 'platform':2A,25B,76C 'pmt':20B,81C 'potenti':116C,137C 'present':126C 'r':75C,80C 'reach':43B 'read':8A,38B 'requir':123C,132C 'result':114C,153C 'ring':87C 'sensit':9A,66C 'server':21B 'softwar':28B,82C,97C 'space':36B 'special':128C 'subsequ':155C 'system':96C,152C,156C 'technolog':4A,27B,78C 'unauthor':70C 'user':6A,35B,89C,102C,134C 'user-spac':34B 'version':84C 'via':118C 'vulner':138C,151C 'window':22B 'within':86C 'without':127C","nicknames":[],"mitigations":[],"who_affected":"Systems that run Intel Platform Monitoring Technology software below 3.2.0.22 are exposed, and the attacker must already have a local user account on the machine. Machines without this software, and machines where only trusted administrators have local logins, carry less risk. The sources do not say which products or platforms ship it.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"available","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["infrastructure","intel","linux","medium","pmt","servers","windows"],"campaign_type":null,"search_a":"'-2026':12A,15A '-33563':13A,16A 'cve':11A,14A 'data':10A 'intel':1A 'local':5A 'monitor':3A 'platform':2A 'read':8A 'sensit':9A 'technolog':4A 'user':6A","search_b":"'3.2.0.22':30B 'account':50B 'applic':37B 'attack':45B 'authent':48B 'avail':62B 'confidenti':56B 'data':53B 'expos':52B 'impact':57B,63B 'inform':39B 'infrastructur':17B 'integr':60B 'intel':18B,24B 'let':31B 'linux':19B 'local':33B,49B 'low':55B 'monitor':26B 'platform':25B 'pmt':20B 'reach':43B 'read':38B 'server':21B 'softwar':28B 'space':36B 'technolog':27B 'user':35B 'user-spac':34B 'window':22B","search_c":"'3':88C '3.2.0.22':85C 'access':120C 'actor':71C 'adversari':98C 'allow':92C 'applic':90C 'attack':108C,122C 'authent':101C 'avail':147C,162C 'combin':103C 'complex':107C 'confidenti':142C,157C 'data':111C 'disclosur':95C 'enabl':110C 'exposur':64C,112C 'impact':140C,164C 'inform':67C,94C 'integr':144C,159C 'intel':74C,79C 'interact':135C 'intern':129C 'knowledg':130C 'local':119C 'low':106C,143C 'may':91C,109C,115C,139C 'monitor':77C 'none':145C,148C,158C,160C,163C 'occur':117C 'platform':76C 'pmt':81C 'potenti':116C,137C 'present':126C 'r':75C,80C 'requir':123C,132C 'result':114C,153C 'ring':87C 'sensit':66C 'softwar':82C,97C 'special':128C 'subsequ':155C 'system':96C,152C,156C 'technolog':78C 'unauthor':70C 'user':89C,102C,134C 'version':84C 'via':118C 'vulner':138C,151C 'within':86C 'without':127C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T17:17:41+00:00","kev":null,"cvss_vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","cvss_by":"secure@intel.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-33563","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-33563","severity":null,"published_at":"2026-11-10T17:17:41+00:00","modified_at":"2026-11-10T17:17:41+00:00","first_seen_at":"2026-11-10T17:22:42+00:00","fetched_at":"2026-11-10T17:22:42+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}