Intel
Page 10 of 19 — Intel CVEs from a corpus of 1842, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-0147 | Medium | 4.4 | 2022-02-09 | Improper locking in the Power Management Controller (PMC) for some Intel Chipset firmware before versions pmc_fw_lbg_c1-21ww02a and pmc_fw_lbg_b0-21ww02a may a… |
CVE-2021-0145 | Medium | 5.5 | 2022-02-09 | Improper initialization of shared resources in some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local… |
CVE-2021-0127 | Medium | 5.5 | 2022-02-09 | Insufficient control flow management in some Intel(R) Processors may allow an authenticated user to potentially enable a denial of service via local access. |
CVE-2021-0125 | Medium | 6.6 | 2022-02-09 | Improper initialization in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via physical acc… |
CVE-2021-0124 | Medium | 6.6 | 2022-02-09 | Improper access control in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via physical acc… |
CVE-2021-0119 | Medium | 6.2 | 2022-02-09 | Improper initialization in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via physical acc… |
CVE-2021-0118 | Medium | 6.7 | 2022-02-09 | Out-of-bounds read in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable an escalation of privilege via local access. |
CVE-2021-0117 | High | 7.8 | 2022-02-09 | Pointer issues in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable an escalation of privilege via local access. |
CVE-2021-0116 | High | 7.8 | 2022-02-09 | Out-of-bounds write in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable an escalation of privilege via local access. |
CVE-2021-0115 | Medium | 6.7 | 2022-02-09 | Buffer overflow in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access. |
CVE-2021-0111 | Medium | 6.7 | 2022-02-09 | NULL pointer dereference in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable an escalation of privilege via local ac… |
CVE-2021-0107 | Medium | 6.7 | 2022-02-09 | Unchecked return value in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access. |
CVE-2021-0103 | Medium | 6.7 | 2022-02-09 | Insufficient control flow management in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable an escalation of privilege… |
CVE-2021-0099 | High | 7.8 | 2022-02-09 | Insufficient control flow management in the firmware for some Intel(R) Processors may allow an authenticated user to potentially enable an escalation of privil… |
CVE-2021-0093 | Medium | 4.4 | 2022-02-09 | Incorrect default permissions in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable a denial of service via local acce… |
CVE-2021-0092 | Medium | 4.4 | 2022-02-09 | Improper access control in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable a denial of service via local access. |
CVE-2021-0091 | High | 7.8 | 2022-02-09 | Improper access control in the firmware for some Intel(R) Processors may allow an unauthenticated user to potentially enable an escalation of privilege via loc… |
CVE-2021-0076 | Medium | 5.5 | 2022-02-09 | Improper Validation of Specified Index, Position, or Offset in Input in firmware for some Intel(R) PROSet/Wireless Wi-Fi in multiple operating systems and some… |
CVE-2021-0072 | Medium | 5.5 | 2022-02-09 | Improper input validation in firmware for some Intel(R) PROSet/Wireless Wi-Fi in multiple operating systems and some Killer(TM) Wi-Fi in Windows 10 and 11 may… |
CVE-2021-0066 | High | 8.4 | 2022-02-09 | Improper input validation in firmware for Intel(R) PROSet/Wireless Wi-Fi in multiple operating systems and Killer(TM) Wi-Fi in Windows 10 and 11 may allow an u… |
CVE-2021-0060 | Medium | 6.6 | 2022-02-09 | Insufficient compartmentalization in HECI subsystem for the Intel(R) SPS before versions SPS_E5_04.01.04.516.0, SPS_E5_04.04.04.033.0, SPS_E5_04.04.03.281.0, S… |
CVE-2022-23098 | High | 7.5 | 2022-01-28 | An issue was discovered in the DNS proxy in Connman through 1.40. The TCP server reply implementation has an infinite loop if no data is received. |
CVE-2022-23097 | Critical | 9.1 | 2022-01-28 | An issue was discovered in the DNS proxy in Connman through 1.40. forward_dns_reply mishandles a strnlen call, leading to an out-of-bounds read. |
CVE-2022-23096 | Critical | 9.1 | 2022-01-28 | An issue was discovered in the DNS proxy in Connman through 1.40. The TCP server reply implementation lacks a check for the presence of sufficient Header Data… |
CVE-2021-45046 | Critical | 9.0 | 2021-12-14 | It was found that the fix to address CVE-2021-44228 in Apache Log4j 2.15.0 was incomplete in certain non-default configurations. This could allows attackers wi… |
CVE-2021-44228 | Critical | 10.0 | 2021-12-10 | Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuration, log messages, and parameter… |
CVE-2021-33118 | High | 7.8 | 2021-11-17 | Improper access control in the software installer for the Intel(R) Serial IO driver for Intel(R) NUC 11 Gen before version 30.100.2104.1 may allow an authentic… |
CVE-2021-33098 | Medium | 5.5 | 2021-11-17 | Improper input validation in the Intel(R) Ethernet ixgbe driver for Linux before version 3.17.3 may allow an authenticated user to potentially enable denial of… |
CVE-2021-33097 | Medium | 6.6 | 2021-11-17 | Time-of-check time-of-use vulnerability in the Crypto API Toolkit for Intel(R) SGX may allow a privileged user to potentially enable escalation of privilege vi… |
CVE-2021-33073 | Medium | 5.5 | 2021-11-17 | Uncontrolled resource consumption in the Intel(R) Distribution of OpenVINOâ„¢ Toolkit before version 2021.4 may allow an unauthenticated user to potentially en… |
CVE-2021-33071 | High | 7.8 | 2021-11-17 | Incorrect default permissions in the installer for the Intel(R) oneAPI Rendering Toolkit before version 2021.2 may allow an authenticated user to potentially e… |
CVE-2021-33063 | High | 7.8 | 2021-11-17 | Uncontrolled search path in the Intel(R) RealSense(TM) D400 Series UWP driver for Windows 10 before version 6.1.160.22 may allow an authenticated user to poten… |
CVE-2021-33062 | High | 7.8 | 2021-11-17 | Incorrect default permissions in the software installer for the Intel(R) VTune(TM) Profiler before version 2021.3.0 may allow an authenticated user to potentia… |
CVE-2021-33059 | Medium | 6.7 | 2021-11-17 | Improper input validation in the Intel(R) Administrative Tools for Intel(R) Network Adapters driver for Windows before version 1.4.0.15, may allow a privileged… |
CVE-2021-33058 | High | 7.8 | 2021-11-17 | Improper access control in the installer Intel(R)Administrative Tools for Intel(R) Network Adaptersfor Windowsbefore version 1.4.0.21 may allow an unauthentica… |
CVE-2021-0200 | Medium | 6.7 | 2021-11-17 | Out-of-bounds write in the firmware for Intel(R) Ethernet 700 Series Controllers before version 8.2 may allow a privileged user to potentially enable an escala… |
CVE-2021-0199 | Medium | 4.4 | 2021-11-17 | Improper input validation in the firmware for the Intel(R) Ethernet Network Controller E810 before version 1.6.0.6 may allow a privileged user to potentially e… |
CVE-2021-0198 | Medium | 4.4 | 2021-11-17 | Improper access control in the firmware for the Intel(R) Ethernet Network Controller E810 before version 1.5.5.6 may allow a privileged user to potentially ena… |
CVE-2021-0197 | Medium | 4.4 | 2021-11-17 | Protection mechanism failure in the firmware for the Intel(R) Ethernet Network Controller E810 before version 1.5.5.6 may allow a privileged user to enable a d… |
CVE-2021-0186 | Medium | 6.7 | 2021-11-17 | Improper input validation in the Intel(R) SGX SDK applications compiled for SGX2 enabled processors may allow a privileged user to potentially escalation of pr… |
CVE-2021-0182 | Medium | 6.2 | 2021-11-17 | Uncontrolled resource consumption in the Intel(R) HAXM software before version 7.6.6 may allow an unauthenticated user to potentially enable information disclo… |
CVE-2021-0180 | High | 8.4 | 2021-11-17 | Uncontrolled resource consumption in the Intel(R) HAXM software before version 7.6.6 may allow an unauthenticated user to potentially enable privilege escalati… |
CVE-2021-0158 | Medium | 6.7 | 2021-11-17 | Improper input validation in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local… |
CVE-2021-0157 | Medium | 6.7 | 2021-11-17 | Insufficient control flow management in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privileg… |
CVE-2021-0152 | Medium | 5.5 | 2021-11-17 | Improper verification of cryptographic signature in the installer for some Intel(R) Wireless Bluetooth(R) and Killer(TM) Bluetooth(R) products in Windows 10 ma… |
CVE-2021-0151 | High | 7.8 | 2021-11-17 | Improper access control in the installer for some Intel(R) Wireless Bluetooth(R) and Killer(TM) Bluetooth(R) products in Windows 10 may allow an authenticated… |
CVE-2021-0148 | Medium | 4.4 | 2021-11-17 | Insertion of information into log file in firmware for some Intel(R) SSD DC may allow a privileged user to potentially enable information disclosure via local… |
CVE-2021-0146 | Medium | 6.8 | 2021-11-17 | Hardware allows activation of test or debug logic at runtime for some Intel(R) processors which may allow an unauthenticated user to potentially enable escalat… |
CVE-2021-0135 | Medium | 6.7 | 2021-11-17 | Improper input validation in the Intel(R) Ethernet Diagnostic Driver for Windows before version 1.4.0.10 may allow a privileged user to potentially enable esca… |
CVE-2021-0120 | Medium | 5.5 | 2021-11-17 | Improper initialization in the installer for some Intel(R) Graphics DCH Drivers for Windows 10 before version 27.20.100.9316 may allow an authenticated user to… |
CVE-2021-0110 | Medium | 5.5 | 2021-11-17 | Improper access control in some Intel(R) Thunderbolt(TM) Windows DCH Drivers before version 1.41.1054.0 may allow unauthenticated user to potentially enable de… |
CVE-2021-0082 | High | 7.8 | 2021-11-17 | Uncontrolled search path in software installer for Intel(R) PROSet/Wireless WiFi in Windows 10 may allow an authenticated user to potentially enable escalation… |
CVE-2021-0079 | Medium | 6.5 | 2021-11-17 | Improper input validation in software for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi in Windows 10 may allow an unauthenticated user to potentially… |
CVE-2021-0078 | High | 8.1 | 2021-11-17 | Improper input validation in software for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi in Windows 10 may allow an unauthenticated user to potentially… |
CVE-2021-0075 | Medium | 5.5 | 2021-11-17 | Out-of-bounds write in firmware for some Intel(R) PROSet/Wireless WiFi in multiple operating systems and some Killer(TM) WiFi in Windows 10 may allow a privile… |
CVE-2021-0071 | High | 8.8 | 2021-11-17 | Improper input validation in firmware for some Intel(R) PROSet/Wireless WiFi in UEFI may allow an unauthenticated user to potentially enable escalation of priv… |
CVE-2021-0069 | Medium | 6.5 | 2021-11-17 | Improper input validation in firmware for some Intel(R) PROSet/Wireless WiFi in multiple operating systems and some Killer(TM) WiFi in Windows 10 may allow an… |
CVE-2021-0065 | High | 7.8 | 2021-11-17 | Incorrect default permissions in the Intel(R) PROSet/Wireless WiFi software installer for Windows 10 before version 22.40 may allow an authenticated user to po… |
CVE-2021-0064 | High | 7.8 | 2021-11-17 | Insecure inherited permissions in the Intel(R) PROSet/Wireless WiFi software installer for Windows 10 before version 22.40 may allow an authenticated user to p… |
CVE-2021-0063 | Medium | 6.5 | 2021-11-17 | Improper input validation in firmware for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi in Windows 10 may allow an unauthenticated user to potentially… |
CVE-2021-0053 | Medium | 5.7 | 2021-11-17 | Improper initialization in firmware for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi in Windows 10 may allow an authenticated user to potentially ena… |
CVE-2021-0013 | High | 7.5 | 2021-11-17 | Improper input validation for Intel(R) EMA before version 1.5.0 may allow an unauthenticated user to potentially enable denial of service via network access. |
CVE-2020-8741 | High | 7.8 | 2021-11-17 | Improper permissions in the installer for the Intel(R) Thunderbolt(TM) non-DCH driver, all versions, for Windows may allow an authenticated user to potentially… |
CVE-2021-33106 | High | 7.8 | 2021-11-17 | Integer overflow in the Safestring library maintained by Intel(R) may allow an authenticated user to potentially enable escalation of privilege via local acces… |
CVE-2021-33095 | High | 7.8 | 2021-11-17 | Unquoted search path in the installer for the Intel(R) NUC M15 Laptop Kit Keyboard LED Service driver pack before version 1.0.0.4 may allow an authenticated us… |
CVE-2021-33094 | High | 7.8 | 2021-11-17 | Insecure inherited permissions in the installer for the Intel(R) NUC M15 Laptop Kit Keyboard LED Service driver pack before version 1.0.0.4 may allow an authen… |
CVE-2021-33093 | High | 7.8 | 2021-11-17 | Insecure inherited permissions in the installer for the Intel(R) NUC M15 Laptop Kit Serial IO driver pack before version 30.100.2104.1 may allow an authenticat… |
CVE-2021-33092 | High | 7.8 | 2021-11-17 | Incorrect default permissions in the installer for the Intel(R) NUC M15 Laptop Kit HID Event Filter driver pack before version 2.2.1.383 may allow an authentic… |
CVE-2021-33091 | High | 7.8 | 2021-11-17 | Insecure inherited permissions in the installer for the Intel(R) NUC M15 Laptop Kit audio driver pack before version 1.3 may allow an authenticated user to pot… |
CVE-2021-33090 | High | 7.8 | 2021-11-17 | Incorrect default permissionsin the software installer for the Intel(R) NUC HDMI Firmware Update Tool for NUC10i3FN, NUC10i5FN, NUC10i7FN before version 1.78.2… |
CVE-2021-33089 | High | 7.8 | 2021-11-17 | Improper access control in the software installer for the Intel(R) NUC HDMI Firmware Update Tool for NUC8i3BE, NUC8i5BE, NUC8i7BE before version 1.78.4.0.4 may… |
CVE-2021-33088 | High | 7.8 | 2021-11-17 | Incorrect default permissions in the installer for the Intel(R) NUC M15 Laptop Kit Integrated Sensor Hub driver pack before version 5.4.1.4449 may allow an aut… |
CVE-2021-33087 | Medium | 5.5 | 2021-11-17 | Improper authentication in the installer for the Intel(R) NUC M15 Laptop Kit Management Engine driver pack before version 15.0.10.1508 may allow an authenticat… |
CVE-2021-33086 | Medium | 5.5 | 2021-11-17 | Out-of-bounds write in firmware for some Intel(R) NUCs may allow an authenticated user to potentially enable denial of service via local access. |
CVE-2021-0121 | High | 7.8 | 2021-11-17 | Improper access control in the installer for some Intel(R) Iris(R) Xe MAX Dedicated Graphics Drivers for Windows 10 before version 27.20.100.9466 may allow aut… |
CVE-2021-0096 | High | 7.8 | 2021-11-17 | Improper authentication in the software installer for the Intel(R) NUC HDMI Firmware Update Tool for NUC7i3DN, NUC7i5DN, NUC7i7DN before version 1.78.1.1 may a… |
CVE-2020-5955 | Critical | 9.8 | 2021-11-03 | An issue was discovered in Int15MicrocodeSmm in Insyde InsydeH2O before 2021-10-14 on Intel client chipsets. A caller may be able to escalate privileges. |
CVE-2021-0114 | Medium | 6.7 | 2021-08-16 | Unchecked return value in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable an escalation of privilege via local acce… |
CVE-2021-0196 | High | 7.8 | 2021-08-11 | Improper access control in kernel mode driver for some Intel(R) NUC 9 Extreme Laptop Kits before version 2.2.0.20 may allow an authenticated user to potentiall… |
CVE-2021-0160 | High | 7.8 | 2021-08-11 | Uncontrolled search path in some Intel(R) NUC Pro Chassis Element AverMedia Capture Card drivers before version 3.0.64.143 may allow an authenticated user to p… |
CVE-2021-0084 | High | 7.8 | 2021-08-11 | Improper input validation in the Intel(R) Ethernet Controllers X722 and 800 series Linux RMDA driver before version 1.3.19 may allow an authenticated user to p… |
CVE-2021-0083 | Medium | 4.4 | 2021-08-11 | Improper input validation in some Intel(R) Optane(TM) PMem versions before versions 1.2.0.5446 or 2.2.0.1547 may allow a privileged user to potentially enable… |
CVE-2021-0062 | High | 7.8 | 2021-08-11 | Improper input validation in some Intel(R) Graphics Drivers before version 27.20.100.8935 may allow an authenticated user to potentially enable escalation of p… |
CVE-2021-0061 | High | 7.8 | 2021-08-11 | Improper initialization in some Intel(R) Graphics Driver before version 27.20.100.9030 may allow an authenticated user to potentially enable escalation of priv… |
CVE-2021-0012 | Medium | 5.5 | 2021-08-11 | Use after free in some Intel(R) Graphics Driver before version 27.20.100.8336, 15.45.33.5164, and 15.40.47.5166 may allow an authenticated user to potentially… |
CVE-2021-0009 | Medium | 6.5 | 2021-08-11 | Out-of-bounds read in the firmware for Intel(R) Ethernet Adapters 800 Series Controllers and associated adapters before version 1.5.3.0 may allow an unauthenti… |
CVE-2021-0008 | Medium | 4.4 | 2021-08-11 | Uncontrolled resource consumption in firmware for Intel(R) Ethernet Adapters 800 Series Controllers and associated adapters before version 1.5.3.0 may allow pr… |
CVE-2021-0007 | Medium | 4.4 | 2021-08-11 | Uncaught exception in firmware for Intel(R) Ethernet Adapters 800 Series Controllers and associated adapters before version 1.5.1.0 may allow a privileged atta… |
CVE-2021-0006 | Medium | 4.4 | 2021-08-11 | Improper conditions check in firmware for Intel(R) Ethernet Adapters 800 Series Controllers and associated adapters before version 1.5.4.0 may allow a privileg… |
CVE-2021-0005 | Medium | 4.4 | 2021-08-11 | Uncaught exception in firmware for Intel(R) Ethernet Adapters 800 Series Controllers and associated adapters before version 1.5.3.0 may allow a privileged user… |
CVE-2021-0004 | Medium | 4.4 | 2021-08-11 | Improper buffer restrictions in the firmware of Intel(R) Ethernet Adapters 800 Series Controllers and associated adapters before version 1.5.3.0 may allow a pr… |
CVE-2021-0003 | Medium | 5.5 | 2021-08-11 | Improper conditions check in some Intel(R) Ethernet Controllers 800 series Linux drivers before version 1.4.11 may allow an authenticated user to potentially e… |
CVE-2021-0002 | High | 7.1 | 2021-08-11 | Improper conditions check in some Intel(R) Ethernet Controllers 800 series Linux drivers before version 1.4.11 may allow an authenticated user to potentially e… |
CVE-2021-0144 | Medium | 6.7 | 2021-07-14 | Insecure default variable initialization for the Intel BSSA DFT feature may allow a privileged user to potentially enable an escalation of privilege via local… |
CVE-2021-0143 | High | 7.8 | 2021-06-17 | Improper permissions in the installer for the Intel(R) Brand Verification Tool before version 11.0.0.1225 may allow an authenticated user to potentially enable… |
CVE-2021-0134 | Medium | 4.9 | 2021-06-09 | Improper input validation in an API for the Intel(R) Security Library before version 3.3 may allow a privileged user to potentially enable denial of service vi… |
CVE-2021-0133 | High | 8.1 | 2021-06-09 | Key exchange without entity authentication in the Intel(R) Security Library before version 3.3 may allow an authenticated user to potentially enable escalation… |
CVE-2021-0132 | Medium | 4.9 | 2021-06-09 | Missing release of resource after effective lifetime in an API for the Intel(R) Security Library before version 3.3 may allow a privileged user to potentially… |
CVE-2021-0131 | Medium | 6.5 | 2021-06-09 | Use of cryptographically weak pseudo-random number generator (PRNG) in an API for the Intel(R) Security Library before version 3.3 may allow an authenticated u… |
CVE-2021-0112 | High | 7.3 | 2021-06-09 | Unquoted service path in the Intel Unite(R) Client for Windows before version 4.2.25031 may allow an authenticated user to potentially enable an escalation of… |