CVE-2022-32579

CVE-2022-32579 is an improper initialization vulnerability in the firmware of specific Intel NUC Laptop Kits (BC0076 and earlier). A privileged user with physical access could exploit this to escalate privileges. With a CVSS score of 7.2 (HIGH), exploitation requires physical access and high privileges, but once achieved, it can lead to high impact on confidentiality, integrity, and availability. There is no public exploit code (Metasploit, Nuclei, ExploitDB) and it is not listed in CISA's KEV catalog, indicating no active exploitation. While there is some community discussion and media coverage, it is not considered a widespread or actively exploited threat.