---
id: "CVE-2026-33563"
page: "https://infrastack.ai/live/CVE-2026-33563"
kind: "vulnerability"
aliases: ["CVE-2026-33563"]
title: "Intel Platform Monitoring Technology: local user can read sensitive data"
severity: "medium"
cvss: 4.8
epss: null
exploited: false
status: "open"
category: "infrastructure"
products: []
ecosystems: []
tags: ["infrastructure", "intel", "linux", "pmt", "servers", "windows"]
not_affected_if: ["no-local-accounts", "no-pmt-software"]
published_at: "2026-11-10T17:17:41+00:00"
first_seen_at: "2026-11-10T17:22:42+00:00"
updated_at: "2026-11-10T17:25:45+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33563", "first_seen_at": "2026-11-10T17:22:42+00:00"}]
exploit_sources: []
---

# Intel Platform Monitoring Technology: local user can read sensitive data

Link for people: https://infrastack.ai/live/CVE-2026-33563 (this .md is for agents)

Some Intel Platform Monitoring Technology software before 3.2.0.22 lets a local user-space application read information it should not reach. An attacker with an authenticated local account can expose data with low confidentiality impact and no integrity or availability impact.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Check the installed Intel Platform Monitoring Technology (PMT) software version against `3.2.0.22`

## Fix

- Intel Platform Monitoring Technology (PMT) software: move to `3.2.0.22` or later

## Timeline

- 2026-11-10T17:22:42+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-33563

## From the sources

Exposure of sensitive information to an unauthorized actor for some Intel(R) Platform Monitoring Technology (Intel(R) PMT) software before version 3.2.0.22 within Ring 3: User Applications may allow an information disclosure. System software adversary with an authenticated user combined with a low complexity attack may enable data exposure. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (low), integrity (none) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_