CVE-2019-11163

CVE-2019-11163 describes an insufficient access control vulnerability in a hardware abstraction driver within the Intel Processor Identification Utility for Windows, affecting versions prior to 6.1.0731. This flaw allows an authenticated local user to potentially achieve escalation of privilege, denial of service, or information disclosure. With a CVSS score of 7.8 (HIGH), it is easily exploitable locally with low attack complexity and no user interaction, leading to high impact across confidentiality, integrity, and availability. While not listed in CISA KEV and lacking public exploit code on Metasploit or ExploitDB, the vulnerability has garnered significant community discussion and media coverage, suggesting awareness despite no confirmed active exploitation.