Intel
Page 5 of 19 — Intel CVEs from a corpus of 1842, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-33898 | Medium | 6.7 | 2023-11-14 | Insecure inherited permissions in some Intel(R) NUC Watchdog Timer installation software before version 2.0.21.0 may allow an authenticated user to potentially… |
CVE-2022-29510 | High | 7.5 | 2023-11-14 | Improper buffer restrictions in some Intel(R) Server Board M10JNP2SB BIOS firmware before version 7.219 may allow a privileged user to potentially enable escal… |
CVE-2022-29262 | High | 7.9 | 2023-11-14 | Improper buffer restrictions in some Intel(R) Server Board BIOS firmware may allow a privileged user to potentially enable escalation of privilege via local ac… |
CVE-2022-27229 | Medium | 6.7 | 2023-11-14 | Path transversal in some Intel(R) NUC Kits NUC7i3DN, NUC7i5DN, NUC7i7DN HDMI firmware update tool software before version 1.79.1.1 may allow an authenticated u… |
CVE-2022-24379 | High | 7.5 | 2023-11-14 | Improper input validation in some Intel(R) Server System M70KLP Family BIOS firmware before version 01.04.0029 may allow a privileged user to potentially enabl… |
CVE-2021-46748 | Medium | 5.5 | 2023-11-14 | Insufficient bounds checking in the ASP (AMD Secure Processor) may allow an attacker to access memory outside the bounds of what is permissible to a TA (Truste… |
CVE-2023-39281 | Critical | 9.8 | 2023-11-01 | A stack buffer overflow vulnerability discovered in AsfSecureBootDxe in Insyde InsydeH2O with kernel 5.0 through 5.5 allows attackers to run arbitrary code exe… |
CVE-2023-44216 | Medium | 5.3 | 2023-09-27 | PVRIC (PowerVR Image Compression) on Imagination 2018 and later GPU devices offers software-transparent compression that enables cross-origin pixel-stealing at… |
CVE-2023-4344 | Critical | 9.8 | 2023-08-15 | Broadcom RAID Controller web interface is vulnerable to insufficient randomness due to improper use of ssl.rnd to setup CIM connection |
CVE-2023-4343 | High | 7.5 | 2023-08-15 | Broadcom RAID Controller web interface is vulnerable due to exposure of sensitive password information in the URL as a URL search parameter |
CVE-2023-4342 | Critical | 9.8 | 2023-08-15 | Broadcom RAID Controller web interface is vulnerable due to insecure defaults of lacking HTTP strict-transport-security policy |
CVE-2023-4341 | Critical | 9.8 | 2023-08-15 | Broadcom RAID Controller is vulnerable to Privilege escalation to root due to creation of insecure folders by Web GUI |
CVE-2023-4340 | Critical | 9.8 | 2023-08-15 | Broadcom RAID Controller is vulnerable to Privilege escalation by taking advantage of the Session prints in the log file |
CVE-2023-4339 | High | 7.5 | 2023-08-15 | Broadcom RAID Controller web interface is vulnerable to exposure of private keys used for CIM stored with insecure file permissions |
CVE-2023-4338 | Critical | 9.8 | 2023-08-15 | Broadcom RAID Controller web interface is vulnerable due to insecure default of HTTP configuration that does not provide X-Content-Type-Options Headers |
CVE-2023-4337 | Critical | 9.8 | 2023-08-15 | Broadcom RAID Controller web interface is vulnerable to improper session handling of managed servers on Gateway installation |
CVE-2023-4336 | Critical | 9.8 | 2023-08-15 | Broadcom RAID Controller web interface is vulnerable due to insecure default of HTTP configuration that does not safeguard cookies with Secure attribute |
CVE-2023-4335 | High | 7.5 | 2023-08-15 | Broadcom RAID Controller Web server (nginx) is serving private server-side files without any authentication on Linux |
CVE-2023-4334 | High | 7.5 | 2023-08-15 | Broadcom RAID Controller Web server (nginx) is serving private files without any authentication |
CVE-2023-4332 | High | 7.5 | 2023-08-15 | Broadcom RAID Controller web interface is vulnerable due to Improper permissions on the log file |
CVE-2023-4331 | High | 7.5 | 2023-08-15 | Broadcom RAID Controller web interface is vulnerable has an insecure default TLS configuration that support obsolete and vulnerable TLS protocols |
CVE-2023-4329 | Critical | 9.8 | 2023-08-15 | Broadcom RAID Controller web interface is vulnerable due to insecure default of HTTP configuration that does not safeguard SESSIONID cookie with SameSite attri… |
CVE-2023-4326 | High | 7.5 | 2023-08-15 | Broadcom RAID Controller web interface is vulnerable has an insecure default TLS configuration that supports obsolete SHA1-based ciphersuites |
CVE-2023-4325 | Critical | 9.8 | 2023-08-15 | Broadcom RAID Controller web interface is vulnerable due to usage of Libcurl with LSA has known vulnerabilities |
CVE-2023-4324 | Critical | 9.8 | 2023-08-15 | Broadcom RAID Controller web interface is vulnerable due to insecure defaults of lacking HTTP Content-Security-Policy headers |
CVE-2023-4323 | Critical | 9.8 | 2023-08-15 | Broadcom RAID Controller web interface is vulnerable to improper session management of active sessions on Gateway setup |
CVE-2023-4345 | Medium | 6.5 | 2023-08-15 | Broadcom RAID Controller web interface is vulnerable client-side control bypass leads to unauthorized data access for low privileged user |
CVE-2023-24478 | Medium | 5.5 | 2023-08-15 | Use of insufficiently random values for some Intel Agilex(R) software included as part of Intel(R) Quartus(R) Prime Pro Edition for linux before version 22.4 m… |
CVE-2023-34438 | High | 7.5 | 2023-08-11 | Race condition in some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable escalation of privilege via local access. |
CVE-2023-34427 | Medium | 5.3 | 2023-08-11 | Protection mechanism failure in some Intel(R) RealSense(TM) ID software for Intel(R) RealSense(TM) 450 FA in version 0.25.0 may allow an authenticated user to… |
CVE-2023-34355 | Medium | 6.7 | 2023-08-11 | Uncontrolled search path element for some Intel(R) Server Board M10JNP2SB integrated BMC video drivers before version 3.0 for Microsoft Windows and before vers… |
CVE-2023-34349 | Medium | 4.6 | 2023-08-11 | Race condition in some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable escalation of privilege via local access. |
CVE-2023-34086 | High | 8.2 | 2023-08-11 | Improper input validation in some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable escalation of privilege via local access. |
CVE-2023-33877 | Low | 3.3 | 2023-08-11 | Out-of-bounds write in some Intel(R) RealSense(TM) ID software for Intel(R) RealSense(TM) 450 FA in version 0.25.0 may allow an authenticated user to potential… |
CVE-2023-33867 | Medium | 4.4 | 2023-08-11 | Improper buffer restrictions in some Intel(R) RealSense(TM) ID software for Intel(R) RealSense(TM) 450 FA in version 0.25.0 may allow an authenticated user to… |
CVE-2023-32663 | Medium | 6.7 | 2023-08-11 | Incorrect default permissions in some Intel(R) RealSense(TM) SDKs in version 2.53.1 may allow an authenticated user to potentially enable escalation of privile… |
CVE-2023-32656 | Medium | 5.3 | 2023-08-11 | Improper buffer restrictions in some Intel(R) RealSense(TM) ID software for Intel(R) RealSense(TM) 450 FA in version 0.25.0 may allow an authenticated user to… |
CVE-2023-32617 | High | 8.2 | 2023-08-11 | Improper input validation in some Intel(R) NUC Rugged Kit, Intel(R) NUC Kit and Intel(R) Compute Element BIOS firmware may allow a privileged user to potential… |
CVE-2023-32609 | Medium | 5.0 | 2023-08-11 | Improper access control in the Intel Unite(R) android application before version 4.2.3504 may allow an authenticated user to potentially enable information dis… |
CVE-2023-32547 | Medium | 6.7 | 2023-08-11 | Incorrect default permissions in the MAVinci Desktop Software for Intel(R) Falcon 8+ before version 6.2 may allow authenticated user to potentially enable esca… |
CVE-2023-32543 | Medium | 6.7 | 2023-08-11 | Incorrect default permissions in the Intel(R) ITS sofware before version 3.1 may allow authenticated user to potentially enable escalation of privilege via loc… |
CVE-2023-32285 | Medium | 6.0 | 2023-08-11 | Improper access control in some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable denial of service via local access. |
CVE-2023-31246 | Medium | 6.7 | 2023-08-11 | Incorrect default permissions in some Intel(R) SDP Tool software before version 1.4 build 5 may allow an authenticated user to potentially enable escalation of… |
CVE-2023-30760 | Low | 3.3 | 2023-08-11 | Out-of-bounds read in some Intel(R) RealSense(TM) ID software for Intel(R) RealSense(TM) 450 FA in version 0.25.0 may allow an authenticated user to potentiall… |
CVE-2023-29500 | Medium | 5.3 | 2023-08-11 | Exposure of sensitive information to an unauthorized actor in BIOS firmware for some Intel(R) NUCs may allow a privilege user to potentially enable information… |
CVE-2023-29494 | High | 7.5 | 2023-08-11 | Improper input validation in BIOS firmware for some Intel(R) NUCs may allow a privileged user to potentially enable escalation of privilege via local access. |
CVE-2023-29243 | Medium | 4.4 | 2023-08-11 | Unchecked return value in some Intel(R) RealSense(TM) ID software for Intel(R) RealSense(TM) 450 FA in version 0.25.0 may allow a priviledged user to potential… |
CVE-2023-29151 | Medium | 6.7 | 2023-08-11 | Uncontrolled search path element in some Intel(R) PSR SDK before version 1.0.0.20 may allow an authenticated user to potentially enable escalation of privilege… |
CVE-2023-28823 | Medium | 6.7 | 2023-08-11 | Uncontrolled search path in some Intel(R) oneAPI Toolkit and component software installers before version 4.3.1.493 may allow an authenticated user to potentia… |
CVE-2023-28714 | High | 8.2 | 2023-08-11 | Improper access control in firmware for some Intel(R) PROSet/Wireless WiFi software for Windows before version 22.220 HF (Hot Fix) may allow a privileged user… |
CVE-2023-28711 | Medium | 5.5 | 2023-08-11 | Insufficient control flow management in the Hyperscan Library maintained by Intel(R) before version 5.4.1 may allow an authenticated user to potentially enable… |
CVE-2023-28658 | Medium | 6.7 | 2023-08-11 | Insecure inherited permissions in some Intel(R) oneMKL software before version 2022.0 may allow an authenticated user to potentially enable escalation of privi… |
CVE-2023-28405 | Medium | 6.7 | 2023-08-11 | Uncontrolled search path in the Intel(R) Distribution of OpenVINO(TM) Toolkit before version 2022.3.0 may allow an authenticated user to potentially enable esc… |
CVE-2023-28385 | High | 8.2 | 2023-08-11 | Improper authorization in the Intel(R) NUC Pro Software Suite for Windows before version 2.0.0.9 may allow a privileged user to potentially enable escalation o… |
CVE-2023-28380 | High | 8.8 | 2023-08-11 | Uncontrolled search path for the Intel(R) AI Hackathon software before version 2.0.0 may allow an unauthenticated user to potentially enable escalation of priv… |
CVE-2023-27887 | Medium | 6.1 | 2023-08-11 | Improper initialization in BIOS firmware for some Intel(R) NUCs may allow a privileged user to potentially enable information disclosure via local access. |
CVE-2023-27515 | High | 8.1 | 2023-08-11 | Cross-site scripting (XSS) for the Intel(R) DSA software before version 23.1.9 may allow unauthenticated user to potentially enable escalation of privilege via… |
CVE-2023-27509 | Medium | 6.6 | 2023-08-11 | Improper access control in some Intel(R) ISPC software installers before version 1.19.0 may allow an authenticated user to potentially enable escalation of pri… |
CVE-2023-27506 | Medium | 5.5 | 2023-08-11 | Improper buffer restrictions in the Intel(R) Optimization for Tensorflow software before version 2.12 may allow an authenticated user to potentially enable esc… |
CVE-2023-27505 | Medium | 6.7 | 2023-08-11 | Incorrect default permissions in some Intel(R) Advanced Link Analyzer Standard Edition software installers before version 22.1 .1 may allow an authenticated us… |
CVE-2023-27392 | Medium | 4.4 | 2023-08-11 | Incorrect default permissions in the Intel(R) Support android application before version v23.02.07 may allow a privileged user to potentially enable informatio… |
CVE-2023-27391 | Medium | 6.7 | 2023-08-11 | Improper access control in some Intel(R) oneAPI Toolkit and component software installers before version 4.3.1.493 may allow a privileged user to potentially e… |
CVE-2023-26587 | High | 7.8 | 2023-08-11 | Improper input validation for the Intel(R) Easy Streaming Wizard software may allow an authenticated user to potentially enable escalation of privilege via loc… |
CVE-2023-25944 | Medium | 6.7 | 2023-08-11 | Uncontrolled search path element in some Intel(R) VCUST Tool software downloaded before February 3nd 2023 may allow an authenticated user to potentially enable… |
CVE-2023-25775 | Medium | 5.6 | 2023-08-11 | Improper access control in the Intel(R) Ethernet Controller RDMA driver for linux before version 1.9.30 may allow an unauthenticated user to potentially enable… |
CVE-2023-25773 | High | 7.5 | 2023-08-11 | Improper access control in the Intel(R) Unite(R) Hub software installer for Windows before version 4.2.34962 may allow an authenticated user to potentially ena… |
CVE-2023-25757 | High | 7.3 | 2023-08-11 | Improper access control in some Intel(R) Unison(TM) software before version 10.12 may allow a privileged user to potentially enable escalation of privilege via… |
CVE-2023-25182 | Medium | 4.2 | 2023-08-11 | Uncontrolled search path element in the Intel(R) Unite(R) Client software for Mac before version 4.2.11 may allow an authenticated user to potentially enable e… |
CVE-2023-24016 | Medium | 6.7 | 2023-08-11 | Uncontrolled search path element in some Intel(R) Quartus(R) Prime Pro and Standard edition software for linux may allow an authenticated user to potentially e… |
CVE-2023-23908 | Medium | 6.0 | 2023-08-11 | Improper access control in some 3rd Generation Intel(R) Xeon(R) Scalable processors may allow a privileged user to potentially enable information disclosure vi… |
CVE-2023-23577 | Medium | 6.7 | 2023-08-11 | Uncontrolled search path element for some ITE Tech consumer infrared drivers before version 5.5.2.1 for Intel(R) NUC may allow an authenticated user to potenti… |
CVE-2023-22841 | Medium | 6.7 | 2023-08-11 | Unquoted search path in the software installer for the System Firmware Update Utility (SysFwUpdt) for some Intel(R) Server Boards and Intel(R) Server Systems B… |
CVE-2023-22840 | Low | 3.3 | 2023-08-11 | Improper neutralization in software for the Intel(R) oneVPL GPU software before version 22.6.5 may allow an authenticated user to potentially enable denial of… |
CVE-2023-22449 | High | 7.5 | 2023-08-11 | Improper input validation in some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable escalation of privilege via local access. |
CVE-2023-22444 | Medium | 6.0 | 2023-08-11 | Improper initialization in some Intel(R) NUC 13 Extreme Compute Element, Intel(R) NUC 13 Extreme Kit, Intel(R) NUC 11 Performance Kit, Intel(R) NUC 11 Performa… |
CVE-2023-22356 | Medium | 6.0 | 2023-08-11 | Improper initialization in some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable information disclosure via local access. |
CVE-2023-22338 | Medium | 4.4 | 2023-08-11 | Out-of-bounds read in some Intel(R) oneVPL GPU software before version 22.6.5 may allow an authenticated user to potentially enable information disclosure via… |
CVE-2023-22330 | Medium | 6.0 | 2023-08-11 | Use of uninitialized resource in some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable information disclosure via local access. |
CVE-2023-22276 | Medium | 6.5 | 2023-08-11 | Race condition in firmware for some Intel(R) Ethernet Controllers and Adapters E810 Series before version 1.7.2.4 may allow an authenticated user to potentiall… |
CVE-2022-46329 | High | 8.2 | 2023-08-11 | Protection mechanism failure for some Intel(R) PROSet/Wireless WiFi software may allow a privileged user to potentially enable escalation of privilege via loca… |
CVE-2022-45112 | High | 7.3 | 2023-08-11 | Improper access control in some Intel(R) VROC software before version 8.0.0.4035 may allow an authenticated user to potentially enable escalation of privilege… |
CVE-2022-44612 | Medium | 5.5 | 2023-08-11 | Use of hard-coded credentials in some Intel(R) Unison(TM) software before version 10.12 may allow an authenticated user user to potentially enable information… |
CVE-2022-44611 | Medium | 6.9 | 2023-08-11 | Improper input validation in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via adjac… |
CVE-2022-43505 | Medium | 4.1 | 2023-08-11 | Insufficient control flow management in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable denial of service via… |
CVE-2022-43456 | Medium | 6.7 | 2023-08-11 | Uncontrolled search path in some Intel(R) RST software before versions 16.8.5.1014.5, 17.11.3.1010.2, 18.7.6.1011.2 and 19.5.2.1049.5 may allow an authenticate… |
CVE-2022-41984 | Medium | 4.4 | 2023-08-11 | Protection mechanism failure for some Intel(R) Arc(TM) graphics cards A770 and A750 Limited Edition sold between October of 2022 and December of 2022 may allow… |
CVE-2022-41804 | High | 7.2 | 2023-08-11 | Unauthorized error injection in Intel(R) SGX or Intel(R) TDX for some Intel(R) Xeon(R) Processors may allow a privileged user to potentially enable escalation… |
CVE-2022-40982 | Medium | 6.5 | 2023-08-11 | Information exposure through microarchitectural state after transient execution in certain vector execution units for some Intel(R) Processors may allow an aut… |
CVE-2022-40964 | High | 7.9 | 2023-08-11 | Improper access control for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi software may allow a privileged user to potentially enable escalation of pri… |
CVE-2022-38973 | Low | 3.3 | 2023-08-11 | Improper access control for some Intel(R) Arc(TM) graphics cards A770 and A750 Limited Edition sold between October of 2022 and December of 2022 may allow an a… |
CVE-2022-38102 | High | 7.2 | 2023-08-11 | Improper Input validation in firmware for some Intel(R) Converged Security and Management Engine before versions 15.0.45, and 16.1.27 may allow a privileged us… |
CVE-2022-38083 | Medium | 6.1 | 2023-08-11 | Improper initialization in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable information disclosure via local ac… |
CVE-2022-38076 | Low | 3.8 | 2023-08-11 | Improper input validation in some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi software may allow an authenticated user to potentially enable escalation o… |
CVE-2022-37343 | High | 7.2 | 2023-08-11 | Improper access control in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local a… |
CVE-2022-37336 | High | 7.9 | 2023-08-11 | Improper input validation in BIOS firmware for some Intel(R) NUC may allow a privileged user to potentially enable escalation of privilege via local access. |
CVE-2022-36392 | High | 8.6 | 2023-08-11 | Improper input validation in some firmware for Intel(R) AMT and Intel(R) Standard Manageability before versions 11.8.94, 11.12.94, 11.22.94, 12.0.93, 14.1.70… |
CVE-2022-36372 | High | 7.5 | 2023-08-11 | Improper buffer restrictions in some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable escalation of privilege via local access. |
CVE-2022-36351 | Medium | 4.3 | 2023-08-11 | Improper input validation in some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi software may allow an unauthenticated user to potentially enable denial of… |
CVE-2022-34657 | Medium | 6.0 | 2023-08-11 | Improper input validation in firmware for some Intel(R) PCSD BIOS before version 02.01.0013 may allow a privileged user to potentially enable information discl… |
CVE-2022-29887 | High | 8.1 | 2023-08-11 | Cross-site Scripting (XSS) in some Intel(R) Manageability Commander software before version 2.3 may allow an unauthenticated user to potentially enable escalat… |