Intel
Page 6 of 19 — Intel CVEs from a corpus of 1842, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-29871 | Medium | 6.7 | 2023-08-11 | Improper access control in the Intel(R) CSME software installer before version 2239.3.7.0 may allow an authenticated user to potentially enable escalation of p… |
CVE-2022-29470 | Medium | 6.7 | 2023-08-11 | Improper access control in the Intel® DTT Software before version 8.7.10400.15482 may allow an authenticated user to potentially enable escalation of privilege… |
CVE-2022-27879 | Medium | 5.3 | 2023-08-11 | Improper buffer restrictions in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable information disclosure via loc… |
CVE-2022-27635 | High | 8.2 | 2023-08-11 | Improper access control for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi software may allow a privileged user to potentially enable escalation of pri… |
CVE-2022-25864 | Medium | 6.7 | 2023-08-11 | Uncontrolled search path in some Intel(R) oneMKL software before version 2022.0 may allow an authenticated user to potentially enable escalation of privilege v… |
CVE-2023-31199 | High | 7.7 | 2023-05-12 | Improper access control in the Intel(R) Solid State Drive Toolbox(TM) before version 3.4.5 may allow a privileged user to potentially enable escalation of priv… |
CVE-2023-31197 | Medium | 6.7 | 2023-05-12 | Uncontrolled search path in the Intel(R) Trace Analyzer and Collector before version 2020 update 3 may allow an authenticated user to potentially enable escala… |
CVE-2023-30768 | High | 7.7 | 2023-05-12 | Improper access control in the Intel(R) Server Board S2600WTT belonging to the Intel(R) Server Board S2600WT Family with the BIOS version 0016 may allow a priv… |
CVE-2023-30763 | High | 7.2 | 2023-05-12 | Heap-based overflow in Intel(R) SoC Watch based software before version 2021.1 may allow a privileged user to potentially enable escalation of privilege via lo… |
CVE-2023-29242 | Medium | 6.7 | 2023-05-12 | Improper access control for Intel(R) oneAPI Toolkits before version 2021.1 Beta 10 may allow an authenticated user to potentially enable escalation of privileg… |
CVE-2023-28411 | Medium | 6.3 | 2023-05-10 | Double free in some Intel(R) Server Board BMC firmware before version 2.90 may allow a privileged user to enable information disclosure via local access. |
CVE-2023-28410 | High | 8.8 | 2023-05-10 | Improper restriction of operations within the bounds of a memory buffer in some Intel(R) i915 Graphics drivers for linux before kernel version 6.2.10 may allow… |
CVE-2023-27386 | Medium | 6.7 | 2023-05-10 | Uncontrolled search path in some Intel(R) Pathfinder for RISC-V software may allow an authenticated user to potentially enable escalation of privilege via loca… |
CVE-2023-27382 | Medium | 6.7 | 2023-05-10 | Incorrect default permissions in the Audio Service for some Intel(R) NUC P14E Laptop Element software for Windows 10 before version 1.0.0.156 may allow an auth… |
CVE-2023-27298 | High | 8.8 | 2023-05-10 | Uncontrolled search path in the WULT software maintained by Intel(R) before version 1.0.0 (commit id 592300b) may allow an unauthenticated user to potentially… |
CVE-2023-25776 | Medium | 6.3 | 2023-05-10 | Improper input validation in some Intel(R) Server Board BMC firmware before version 2.90 may allow a privileged user to enable information disclosure via local… |
CVE-2023-25772 | Medium | 5.0 | 2023-05-10 | Improper input validation in the Intel(R) Retail Edge Mobile Android application before version 3.0.301126-RELEASE may allow an authenticated user to potential… |
CVE-2023-25771 | Medium | 5.8 | 2023-05-10 | Improper access control for some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable denial of service via local access. |
CVE-2023-25545 | High | 8.2 | 2023-05-10 | Improper buffer restrictions in some Intel(R) Server Board BMC firmware before version 2.90 may allow a privileged user to enable escalation of privilege via l… |
CVE-2023-25179 | Medium | 5.0 | 2023-05-10 | Uncontrolled resource consumption in the Intel(R) Unite(R) android application before Release 17 may allow an authenticated user to potentially enable denial o… |
CVE-2023-25175 | Medium | 6.1 | 2023-05-10 | Improper input validation in some Intel(R) Server Board BMC firmware before version 2.90 may allow a privileged user to enable information disclosure via local… |
CVE-2023-24475 | Medium | 6.0 | 2023-05-10 | Out of bounds read in some Intel(R) Server Board BMC firmware before version 2.90 may allow a privileged user to enable information disclosure via local access. |
CVE-2023-23910 | Low | 3.9 | 2023-05-10 | Out-of-bounds write for some Intel(R) Trace Analyzer and Collector software before version 2021.8.0 published Dec 2022 may allow an authenticated user to poten… |
CVE-2023-23909 | Low | 2.8 | 2023-05-10 | Out-of-bounds read for some Intel(R) Trace Analyzer and Collector software before version 2021.8.0 published Dec 2022 may allow an authenticated user to potent… |
CVE-2023-23580 | Medium | 4.8 | 2023-05-10 | Stack-based buffer overflow for some Intel(R) Trace Analyzer and Collector software before version 2021.8.0 published Dec 2022 may allow an authenticated user… |
CVE-2023-23573 | Medium | 4.4 | 2023-05-10 | Improper access control in the Intel(R) Unite(R) android application before Release 17 may allow a privileged user to potentially enable information disclosure… |
CVE-2023-23569 | High | 7.8 | 2023-05-10 | Stack-based buffer overflow for some Intel(R) Trace Analyzer and Collector software before version 2021.8.0 published Dec 2022 may allow an authenticated user… |
CVE-2023-22661 | High | 8.2 | 2023-05-10 | Buffer overflow in some Intel(R) Server Board BMC firmware before version 2.90 may allow a privileged user to enable escalation of privilege via local access. |
CVE-2023-22447 | Low | 2.0 | 2023-05-10 | Insertion of sensitive information into log file in the Open CAS software for Linux maintained by Intel before version 22.6.2 may allow a privileged user to po… |
CVE-2023-22443 | Medium | 6.0 | 2023-05-10 | Integer overflow in some Intel(R) Server Board BMC firmware before version 2.90 may allow a privileged user to enable denial of service via local access. |
CVE-2023-22442 | High | 7.9 | 2023-05-10 | Out of bounds write in some Intel(R) Server Board BMC firmware before version 2.90 may allow a privileged user to enable escalation of privilege via local acce… |
CVE-2023-22440 | Medium | 6.7 | 2023-05-10 | Incorrect default permissions in the Intel(R) SCS Add-on software installer for Microsoft SCCM all versions may allow an authenticated user to potentially enab… |
CVE-2023-22379 | Medium | 6.7 | 2023-05-10 | Improper input validation in some Intel(R) Server Board BMC firmware before version 2.90 may allow a privileged user to enable information disclosure via local… |
CVE-2023-22355 | Medium | 6.7 | 2023-05-10 | Uncontrolled search path in some Intel(R) oneAPI Toolkit and component software installers before version 4.3.0.251 may allow an authenticated user to potentia… |
CVE-2023-22312 | High | 7.2 | 2023-05-10 | Improper access control for some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable escalation of privilege via local access. |
CVE-2023-22297 | High | 8.2 | 2023-05-10 | Access of memory location after end of buffer in some Intel(R) Server Board BMC firmware before version 2.90 may allow a privileged user to enable escalation o… |
CVE-2022-46656 | Medium | 6.7 | 2023-05-10 | Insecure inherited permissions for the Intel(R) NUC Pro Software Suite before version 2.0.0.3 may allow an authenticated user to potentially enable escalation… |
CVE-2022-46645 | Medium | 5.0 | 2023-05-10 | Uncontrolled resource consumption in the Intel(R) Smart Campus Android application before version 9.9 may allow an authenticated user to potentially enable den… |
CVE-2022-46279 | Medium | 5.0 | 2023-05-10 | Improper access control in the Intel(R) Retail Edge android application before version 3.0.301126-RELEASE may allow an authenticated user to potentially enable… |
CVE-2022-45128 | Medium | 5.0 | 2023-05-10 | Improper authorization in the Intel(R) EMA software before version 1.9.0.0 may allow an authenticated user to potentially enable denial of service via local ac… |
CVE-2022-44619 | High | 8.2 | 2023-05-10 | Insecure storage of sensitive information in the Intel(R) DCM software before version 5.1 may allow an authenticated user to potentially enable escalation of p… |
CVE-2022-44610 | Medium | 5.4 | 2023-05-10 | Improper authentication in the Intel(R) DCM software before version 5.1 may allow an authenticated user to potentially enable escalation of privilege via netwo… |
CVE-2022-43507 | High | 7.5 | 2023-05-10 | Improper buffer restrictions in the Intel(R) QAT Engine for OpenSSL before version 0.6.16 may allow a privileged user to potentially enable escalation of privi… |
CVE-2022-43475 | Medium | 6.0 | 2023-05-10 | Insecure storage of sensitive information in the Intel(R) DCM software before version 5.1 may allow an authenticated user to potentially enable escalation of p… |
CVE-2022-43474 | Medium | 6.7 | 2023-05-10 | Uncontrolled search path for the DSP Builder software installer before version 22.4 for Intel(R) FPGAs Pro Edition may allow an authenticated user to potential… |
CVE-2022-43465 | Medium | 5.0 | 2023-05-10 | Improper authorization in the Intel(R) SCS software all versions may allow an authenticated user to potentially enable denial of service via local access. |
CVE-2022-42878 | Low | 2.8 | 2023-05-10 | Null pointer dereference for some Intel(R) Trace Analyzer and Collector software before version 2021.8.0 published Dec 2022 may allow an authenticated user to… |
CVE-2022-42465 | High | 7.2 | 2023-05-10 | Improper access control in kernel mode driver for the Intel(R) OFU software before version 14.1.30 may allow a privileged user to potentially enable escalation… |
CVE-2022-41998 | Medium | 6.7 | 2023-05-10 | Uncontrolled search path in the Intel(R) DCM software before version 5.1 may allow an authenticated user to potentially enable escalation of privilege via loca… |
CVE-2022-41982 | Medium | 6.7 | 2023-05-10 | Uncontrolled search path element in the Intel(R) VTune(TM) Profiler software before version 2023.0 may allow an authenticated user to potentially enable escala… |
CVE-2022-41979 | Medium | 5.4 | 2023-05-10 | Protection mechanism failure in the Intel(R) DCM software before version 5.1 may allow an authenticated user to potentially enable escalation of privilege via… |
CVE-2022-41808 | Low | 3.3 | 2023-05-10 | Improper buffer restriction in software for the Intel QAT Driver for Linux before version 1.7.l.4.12 may allow an authenticated user to potentially enable deni… |
CVE-2022-41801 | Medium | 5.0 | 2023-05-10 | Uncontrolled resource consumption in the Intel(R) Connect M Android application before version 1.82 may allow an authenticated user to potentially enable denia… |
CVE-2022-41784 | High | 8.8 | 2023-05-10 | Improper access control in kernel mode driver for the Intel(R) OFU software before version 14.1.30 may allow an authenticated user to potentially enable escala… |
CVE-2022-41771 | Medium | 6.5 | 2023-05-10 | Incorrect permission assignment for critical resource in some Intel(R) QAT drivers for Windows before version 1.9.0 may allow an authenticated user to potentia… |
CVE-2022-41769 | Medium | 4.8 | 2023-05-10 | Improper access control in the Intel(R) Connect M Android application before version 1.82 may allow an authenticated user to potentially enable escalation of p… |
CVE-2022-41699 | High | 8.2 | 2023-05-10 | Incorrect permission assignment for critical resource in some Intel(R) QAT drivers for Windows before version 1.9.0 may allow an authenticated user to potentia… |
CVE-2022-41693 | Medium | 6.7 | 2023-05-10 | Uncontrolled search path in the Intel(R) Quartus(R) Prime Pro edition software before version 22.3 may allow an authenticated user to potentially enable escala… |
CVE-2022-41690 | High | 7.1 | 2023-05-10 | Improper access control in the Intel(R) Retail Edge Mobile iOS application before version 3.4.7 may allow an authenticated user to potentially enable escalatio… |
CVE-2022-41687 | Medium | 6.7 | 2023-05-10 | Insecure inherited permissions in the HotKey Services for some Intel(R) NUC P14E Laptop Element software for Windows 10 before version 1.1.44 may allow an auth… |
CVE-2022-41658 | Medium | 6.7 | 2023-05-10 | Insecure inherited permissions in the Intel(R) VTune(TM) Profiler software before version 2023.0 may allow an authenticated user to potentially enable escalati… |
CVE-2022-41646 | Medium | 4.7 | 2023-05-10 | Insufficient control flow management in the Intel(R) IPP Cryptography software before version 2021.6 may allow an unauthenticated user to potentially enable in… |
CVE-2022-41628 | Medium | 6.7 | 2023-05-10 | Uncontrolled search path element in the HotKey Services for some Intel(R) NUC P14E Laptop Element software for Windows 10 before version 1.1.44 may allow an au… |
CVE-2022-41621 | Low | 3.3 | 2023-05-10 | Improper access control in some Intel(R) QAT drivers for Windows before version 1.9.0 may allow an authenticated user to potentially enable information disclos… |
CVE-2022-41610 | Medium | 5.0 | 2023-05-10 | Improper authorization in Intel(R) EMA Configuration Tool before version 1.0.4 and Intel(R) MC before version 2.4 software may allow an authenticated user to p… |
CVE-2022-40974 | Low | 1.8 | 2023-05-10 | Incomplete cleanup in the Intel(R) IPP Cryptography software before version 2021.6 may allow a privileged user to potentially enable information disclosure via… |
CVE-2022-40972 | Medium | 6.7 | 2023-05-10 | Improper access control in some Intel(R) QAT drivers for Windows before version 1.9.0 may allow an authenticated user to potentially enable escalation of privi… |
CVE-2022-40971 | Medium | 6.7 | 2023-05-10 | Incorrect default permissions for the Intel(R) HDMI Firmware Update Tool for NUC before version 1.79.1.1 may allow an authenticated user to potentially enable… |
CVE-2022-40685 | Medium | 6.5 | 2023-05-10 | Insufficiently protected credentials in the Intel(R) DCM software before version 5.0.1 may allow an authenticated user to potentially enable information disclo… |
CVE-2022-40210 | Medium | 6.8 | 2023-05-10 | Exposure of data element to wrong session in the Intel DCM software before version 5.0.1 may allow an authenticated user to potentially enable escalation of pr… |
CVE-2022-40207 | High | 8.2 | 2023-05-10 | Improper access control in the Intel(R) SUR software before version 2.4.8989 may allow an authenticated user to potentially enable escalation of privilege via… |
CVE-2022-38787 | Medium | 5.7 | 2023-05-10 | Improper input validation in firmware for some Intel(R) FPGA products before version 2.7.0 Hotfix may allow an authenticated user to potentially enable escalat… |
CVE-2022-38103 | Medium | 6.7 | 2023-05-10 | Insecure inherited permissions in the Intel(R) NUC Software Studio Service installer before version 1.17.38.0 may allow an authenticated user to potentially en… |
CVE-2022-38101 | Medium | 6.7 | 2023-05-10 | Uncontrolled search path in some Intel(R) NUC Chaco Canyon BIOS update software before version iFlashV Windows 5.13.00.2105 may allow an authenticated user to… |
CVE-2022-38087 | Medium | 4.1 | 2023-05-10 | Exposure of resource to wrong sphere in BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable information disclosure via… |
CVE-2022-37409 | Medium | 4.7 | 2023-05-10 | Insufficient control flow management for the Intel(R) IPP Cryptography software before version 2021.6 may allow an authenticated user to potentially enable inf… |
CVE-2022-37327 | Medium | 6.1 | 2023-05-10 | Improper input validation in BIOS firmware for Intel(R) NUC, Intel(R) NUC Performance Kit, Intel(R) NUC Performance Mini PC, Intel(R) NUC 8 Compute Element, In… |
CVE-2022-36391 | Medium | 6.7 | 2023-05-10 | Incorrect default permissions for the Intel(R) NUC Pro Software Suite before version 2.0.0.3 may allow an authenticated user to potentially enable escalation o… |
CVE-2022-36339 | High | 7.5 | 2023-05-10 | Improper input validation in firmware for Intel(R) NUC 8 Compute Element, Intel(R) NUC 11 Compute Element, Intel(R) NUC 12 Compute Element may allow a privileg… |
CVE-2022-34855 | Medium | 6.7 | 2023-05-10 | Path traversal for the Intel(R) NUC Pro Software Suite before version 2.0.0.3 may allow an authenticated user to potentially enable escalation of privilege via… |
CVE-2022-34848 | Medium | 6.7 | 2023-05-10 | Uncontrolled search path for the Intel(R) NUC Pro Software Suite before version 2.0.0.3 may allow an authenticated user to potentially enable escalation of pri… |
CVE-2022-34147 | High | 7.5 | 2023-05-10 | Improper input validation in BIOS firmware for some Intel(R) NUC 9 Extreme Laptop Kits, Intel(R) NUC Performance Kits, Intel(R) NUC Performance Mini PC, Intel(… |
CVE-2022-33963 | Medium | 6.7 | 2023-05-10 | Incorrect default permissions in the software installer for Intel(R) Unite(R) Client software for Windows before version 4.2.34870 may allow an authenticated u… |
CVE-2022-33894 | High | 7.5 | 2023-05-10 | Improper input validation in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local… |
CVE-2022-32766 | High | 7.2 | 2023-05-10 | Improper input validation for some Intel(R) BIOS firmware may allow a privileged user to potentially enable escalation of privilege via local access. |
CVE-2022-32582 | Medium | 5.3 | 2023-05-10 | Improper access control in firmware for some Intel(R) NUC Boards, Intel(R) NUC 11 Performance Kit, Intel(R) NUC 11 Performance Mini PC, Intel(R) NUC Pro Comput… |
CVE-2022-32578 | Medium | 6.7 | 2023-05-10 | Improper access control for the Intel(R) NUC Pro Software Suite before version 2.0.0.3 may allow an authenticated user to potentially enable escalation of priv… |
CVE-2022-32577 | Low | 3.4 | 2023-05-10 | Improper input validation in BIOS Firmware for some Intel(R) NUC Kits before version PY0081 may allow a privileged user to potentially enable information discl… |
CVE-2022-32576 | Medium | 6.7 | 2023-05-10 | Uncontrolled search path in the Intel(R) Unite(R) Plugin SDK before version 4.2 may allow an authenticated user to potentially enable escalation of privilege v… |
CVE-2022-31477 | Medium | 4.0 | 2023-05-10 | Improper initialization for some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable information disclosure via local access. |
CVE-2022-30338 | Medium | 6.7 | 2023-05-10 | Incorrect default permissions in the Intel(R) VROC software before version 7.7.6.1003 may allow an authenticated user to potentially enable escalation of privi… |
CVE-2022-29919 | High | 7.8 | 2023-05-10 | Use after free in the Intel(R) VROC software before version 7.7.6.1003 may allow an authenticated user to potentially enable escalation of privilege via local… |
CVE-2022-29508 | Medium | 6.3 | 2023-05-10 | Null pointer dereference in the Intel(R) VROC software before version 7.7.6.1003 may allow an authenticated user to potentially enable escalation of privilege… |
CVE-2022-28699 | High | 7.5 | 2023-05-10 | Improper input validation for some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable escalation of privilege via local access. |
CVE-2022-27180 | Medium | 4.2 | 2023-05-10 | Uncontrolled search path in the Intel(R) MacCPUID software before version 3.2 may allow an authenticated user to potentially enable escalation of privilege via… |
CVE-2022-25976 | Medium | 5.5 | 2023-05-10 | Improper input validation in the Intel(R) VROC software before version 7.7.6.1003 may allow an authenticated user to potentially enable denial of service via l… |
CVE-2022-21804 | High | 8.4 | 2023-05-10 | Out-of-bounds write in software for the Intel QAT Driver for Windows before version 1.9.0-0008 may allow an authenticated user to potentially enable escalation… |
CVE-2022-21239 | Medium | 5.6 | 2023-05-10 | Out-of-bounds read in software for the Intel QAT Driver for Windows before version 1.9.0-0008 may allow an authenticated user to potentially enable information… |
CVE-2022-21162 | Medium | 6.7 | 2023-05-10 | Uncontrolled search path for the Intel(R) HDMI Firmware Update tool for NUC before version 1.79.1.1 may allow an authenticated user to potentially enable escal… |
CVE-2023-28488 | Medium | 6.5 | 2023-04-12 | client.c in gdhcp in ConnMan through 1.41 could be used by network-adjacent attackers (operating a crafted DHCP server) to cause a stack-based buffer overflow… |