Intel
Page 8 of 19 — Intel CVEs from a corpus of 1842, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-29466 | High | 7.3 | 2022-11-11 | Improper input validation in firmware for Intel(R) SPS before version SPS_E3_04.01.04.700.0 may allow an authenticated user to potentially enable denial of ser… |
CVE-2022-28667 | Medium | 6.5 | 2022-11-11 | Out-of-bounds write for some Intel(R) PROSet/Wireless WiFi software before version 22.140 may allow an unauthenticated user to potentially enable denial of ser… |
CVE-2022-28611 | Medium | 6.8 | 2022-11-11 | Improper input validation in some Intel(R) XMM(TM) 7560 Modem software before version M2_7560_R_01.2146.00 may allow a privileged user to potentially enable es… |
CVE-2022-28126 | Medium | 6.0 | 2022-11-11 | Improper input validation in some Intel(R) XMM(TM) 7560 Modem software before version M2_7560_R_01.2146.00 may allow a privileged user to potentially enable es… |
CVE-2022-27874 | Medium | 6.8 | 2022-11-11 | Improper authentication in some Intel(R) XMM(TM) 7560 Modem software before version M2_7560_R_01.2146.00 may allow a privileged user to potentially enable esca… |
CVE-2022-27639 | Medium | 5.4 | 2022-11-11 | Incomplete cleanup in some Intel(R) XMM(TM) 7560 Modem software before version M2_7560_R_01.2146.00 may allow a privileged user to potentially enable escalatio… |
CVE-2022-27638 | Medium | 6.7 | 2022-11-11 | Uncontrolled search path element in the Intel(R) Advanced Link Analyzer Pro before version 22.2 and Standard edition software before version 22.1.1 STD may all… |
CVE-2022-27499 | Low | 2.5 | 2022-11-11 | Premature release of resource during expected lifetime in the Intel(R) SGX SDK software may allow a privileged user to potentially enable information disclosur… |
CVE-2022-27497 | High | 8.6 | 2022-11-11 | Null pointer dereference in firmware for Intel(R) AMT before version 11.8.93, 11.22.93, 11.12.93, 12.0.92, 14.1.67, 15.0.42, 16.1.25 may allow an unauthenticat… |
CVE-2022-27233 | Medium | 6.5 | 2022-11-11 | XML injection in the Quartus(R) Prime Programmer included in the Intel(R) Quartus Prime Pro and Standard edition software may allow an unauthenticated user to… |
CVE-2022-27187 | Medium | 6.7 | 2022-11-11 | Uncontrolled search path element in the Intel(R) Quartus Prime Standard edition software before version 21.1 Patch 0.02std may allow an authenticated user to p… |
CVE-2022-26845 | High | 8.7 | 2022-11-11 | Improper authentication in firmware for Intel(R) AMT before versions 11.8.93, 11.22.93, 11.12.93, 12.0.92, 14.1.67, 15.0.42, 16.1.25 may allow an unauthenticat… |
CVE-2022-26513 | High | 8.0 | 2022-11-11 | Out-of-bounds write in some Intel(R) XMM(TM) 7560 Modem software before version M2_7560_R_01.2146.00 may allow an unauthenticated user to potentially enable es… |
CVE-2022-26508 | Medium | 4.3 | 2022-11-11 | Improper authentication in the Intel(R) SDP Tool before version 3.0.0 may allow an unauthenticated user to potentially enable information disclosure via networ… |
CVE-2022-26369 | Medium | 6.2 | 2022-11-11 | Out-of-bounds read in some Intel(R) XMM(TM) 7560 Modem software before version M2_7560_R_01.2146.00 may allow a privileged user to potentially enable escalatio… |
CVE-2022-26367 | Medium | 6.0 | 2022-11-11 | Improper buffer restrictions in some Intel(R) XMM(TM) 7560 Modem software before version M2_7560_R_01.2146.00 may allow a privileged user to potentially enable… |
CVE-2022-26341 | High | 8.2 | 2022-11-11 | Insufficiently protected credentials in software in Intel(R) AMT SDK before version 16.0.4.1, Intel(R) EMA before version 1.7.1 and Intel(R) MC before version… |
CVE-2022-26124 | High | 7.5 | 2022-11-11 | Improper buffer restrictions in BIOS firmware for some Intel(R) NUC Boards, Intel(R) NUC 8 Boards, Intel(R) NUC 8 Rugged Boards and Intel(R) NUC 8 Rugged Kits… |
CVE-2022-26086 | Medium | 6.7 | 2022-11-11 | Uncontrolled search path element in the PresentMon software maintained by Intel(R) before version 1.7.1 may allow an authenticated user to potentially enable e… |
CVE-2022-26079 | Medium | 6.0 | 2022-11-11 | Improper conditions check in some Intel(R) XMM(TM) 7560 Modem software before version M2_7560_R_01.2146.00 may allow a privileged user to potentially enable es… |
CVE-2022-26047 | Medium | 4.3 | 2022-11-11 | Improper input validation for some Intel(R) PROSet/Wireless WiFi, Intel vPro(R) CSME WiFi and Killer(TM) WiFi products may allow unauthenticated user to potent… |
CVE-2022-26045 | Low | 3.3 | 2022-11-11 | Improper buffer restrictions in some Intel(R) XMM(TM) 7560 Modem software before version M2_7560_R_01.2146.00 may allow a privileged user to potentially enable… |
CVE-2022-26028 | Medium | 6.7 | 2022-11-11 | Uncontrolled search path in the Intel(R) VTune(TM) Profiler software before version 2022.2.0 may allow an authenticated user to potentially enable escalation o… |
CVE-2022-26024 | Medium | 6.7 | 2022-11-11 | Improper access control in the Intel(R) NUC HDMI Firmware Update Tool for NUC7i3DN, NUC7i5DN and NUC7i7DN before version 1.78.2.0.7 may allow an authenticated… |
CVE-2022-26006 | High | 8.2 | 2022-11-11 | Improper input validation in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local… |
CVE-2022-25917 | Medium | 6.0 | 2022-11-11 | Uncaught exception in the firmware for some Intel(R) Server Board M50CYP Family before version R01.01.0005 may allow a privileged user to potentially enable a… |
CVE-2022-21794 | High | 7.7 | 2022-11-11 | Improper authentication in BIOS firmware for some Intel(R) NUC Boards, Intel(R) NUC Business, Intel(R) NUC Enthusiast, Intel(R) NUC Kits before version HN0067… |
CVE-2022-21198 | High | 7.9 | 2022-11-11 | Time-of-check time-of-use race condition in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of priv… |
CVE-2021-33164 | High | 8.2 | 2022-11-11 | Improper access control in BIOS firmware for some Intel(R) NUCs before version INWHL357.0046 may allow a privileged user to potentially enable escalation of pr… |
CVE-2021-33159 | High | 7.4 | 2022-11-11 | Improper authentication in subsystem for Intel(R) AMT before versions 11.8.93, 11.22.93, 11.12.93, 12.0.92, 14.1.67, 15.0.42, 16.1.25 may allow a privileged us… |
CVE-2021-33064 | Medium | 6.7 | 2022-11-11 | Uncontrolled search path in the software installer for Intel(R) System Studio for all versions, may allow an authenticated user to potentially enable escalatio… |
CVE-2021-26251 | Medium | 5.3 | 2022-11-11 | Improper input validation in the Intel(R) Distribution of OpenVINO(TM) Toolkit may allow an authenticated user to potentially enable denial of service via netw… |
CVE-2021-0185 | High | 7.5 | 2022-11-10 | Improper input validation in the firmware for some Intel(R) Server Board M10JNP Family before version 7.216 may allow a privileged user to potentially enable a… |
CVE-2022-40262 | High | 8.2 | 2022-09-20 | A potential attacker can execute an arbitrary code at the time of the PEI phase and influence the subsequent boot stages. This can lead to the mitigations bypa… |
CVE-2022-40261 | High | 8.2 | 2022-09-20 | An attacker can exploit this vulnerability to elevate privileges from ring 0 to ring -2, execute arbitrary code in System Management Mode - an environment more… |
CVE-2022-40250 | High | 8.8 | 2022-09-20 | An attacker can exploit this vulnerability to elevate privileges from ring 0 to ring -2, execute arbitrary code in System Management Mode - an environment more… |
CVE-2022-40246 | High | 7.2 | 2022-09-20 | A potential attacker can write one byte by arbitrary address at the time of the PEI phase (only during S3 resume boot mode) and influence the subsequent boot s… |
CVE-2022-26873 | High | 8.2 | 2022-09-20 | A potential attacker can execute an arbitrary code at the time of the PEI phase and influence the subsequent boot stages. This can lead to the mitigations bypa… |
CVE-2021-33081 | High | 7.9 | 2022-09-20 | Protection mechanism failure in firmware for some Intel(R) SSD DC Products may allow a privileged user to potentially enable information disclosure via local a… |
CVE-2021-33079 | Medium | 4.1 | 2022-09-20 | Protection mechanism failure in firmware for some Intel(R) SSD DC Products may allow a privileged user to potentially enable information disclosure via local a… |
CVE-2021-33076 | Medium | 5.3 | 2022-09-20 | Improper authentication in firmware for some Intel(R) SSD DC Products may allow an unauthenticated user to potentially enable escalation of privilege via physi… |
CVE-2022-34488 | High | 7.8 | 2022-08-18 | Improper buffer restrictions in the firmware for some Intel(R) NUC Laptop Kits before version BC0076 may allow a privileged user to potentially enable escalati… |
CVE-2022-34345 | Medium | 6.2 | 2022-08-18 | Improper input validation in the firmware for some Intel(R) NUC Laptop Kits before version BC0076 may allow a privileged user to potentially enable escalation… |
CVE-2022-33209 | High | 7.8 | 2022-08-18 | Improper input validation in the firmware for some Intel(R) NUC Laptop Kits before version BC0076 may allow a privileged user to potentially enable escalation… |
CVE-2022-32579 | High | 7.2 | 2022-08-18 | Improper initialization in the firmware for some Intel(R) NUC Laptop Kits before version BC0076 may allow a privileged user to potentially enable escalation of… |
CVE-2022-30944 | Medium | 5.5 | 2022-08-18 | Insufficiently protected credentials for Intel(R) AMT and Intel(R) Standard Manageability may allow a privileged user to potentially enable information disclos… |
CVE-2022-30601 | Critical | 9.8 | 2022-08-18 | Insufficiently protected credentials for Intel(R) AMT and Intel(R) Standard Manageability may allow an unauthenticated user to potentially enable information d… |
CVE-2022-28858 | High | 7.8 | 2022-08-18 | Improper buffer restriction in the firmware for some Intel(R) NUC Laptop Kits before version BC0076 may allow a privileged user to potentially enable escalatio… |
CVE-2022-28697 | Medium | 6.8 | 2022-08-18 | Improper access control in firmware for Intel(R) AMT and Intel(R) Standard Manageability may allow an unauthenticated user to potentially enable escalation of… |
CVE-2022-27493 | High | 7.8 | 2022-08-18 | Improper initialization in the firmware for some Intel(R) NUC Laptop Kits before version BC0076 may allow a privileged user to potentially enable an escalation… |
CVE-2022-30296 | High | 7.5 | 2022-08-18 | Insufficiently protected credentials in the Intel(R) Datacenter Group Event iOS application, all versions, may allow an unauthenticated user to potentially ena… |
CVE-2022-29507 | Medium | 5.5 | 2022-08-18 | Insufficiently protected credentials in the Intel(R) Team Blue mobile application in all versions may allow an authenticated user to potentially enable informa… |
CVE-2022-28709 | Medium | 4.4 | 2022-08-18 | Improper access control in the firmware for some Intel(R) E810 Ethernet Controllers before version 1.6.1.9 may allow a privileged user to potentially enable de… |
CVE-2022-28696 | High | 7.8 | 2022-08-18 | Uncontrolled search path in the Intel(R) Distribution for Python before version 2022.0.3 may allow an authenticated user to potentially enable escalation of pr… |
CVE-2022-27500 | Medium | 5.5 | 2022-08-18 | Incorrect default permissions for the Intel(R) Support Android application before 21.07.40 may allow an authenticated user to potentially enable information di… |
CVE-2022-26844 | High | 7.8 | 2022-08-18 | Insufficiently protected credentials in the installation binaries for Intel(R) SEAPI in all versions may allow an authenticated user to potentially enable esca… |
CVE-2022-26374 | High | 7.8 | 2022-08-18 | Uncontrolled search path in the installation binaries for Intel(R) SEAPI all versions may allow an authenticated user to potentially enable escalation of privi… |
CVE-2022-26373 | Medium | 5.5 | 2022-08-18 | Non-transparent sharing of return predictor targets between contexts in some Intel(R) Processors may allow an authorized user to potentially enable information… |
CVE-2022-26344 | High | 7.8 | 2022-08-18 | Incorrect default permissions in the installation binaries for Intel(R) SEAPI all versions may allow an authenticated user to potentially enable escalation of… |
CVE-2022-26074 | Medium | 4.4 | 2022-08-18 | Incomplete cleanup in a firmware subsystem for Intel(R) SPS before versions SPS_E3_04.08.04.330.0 and SPS_E3_04.01.04.530.0 may allow a privileged user to pote… |
CVE-2022-26017 | High | 8.0 | 2022-08-18 | Improper access control in the Intel(R) DSA software for before version 22.2.14 may allow an authenticated user to potentially enable escalation of privilege v… |
CVE-2022-25999 | High | 7.8 | 2022-08-18 | Uncontrolled search path element in the Intel(R) Enpirion(R) Digital Power Configurator GUI software, all versions may allow an authenticated user to potential… |
CVE-2022-25966 | High | 7.8 | 2022-08-18 | Improper access control in the Intel(R) Edge Insights for Industrial software before version 2.6.1 may allow an authenticated user to potentially enable escala… |
CVE-2022-25899 | Critical | 9.8 | 2022-08-18 | Authentication bypass for the Open AMT Cloud Toolkit software maintained by Intel(R) before versions 2.0.2 and 2.2.2 may allow an unauthenticated user to poten… |
CVE-2022-25841 | High | 7.8 | 2022-08-18 | Uncontrolled search path elements in the Intel(R) Datacenter Group Event Android application, all versions, may allow an authenticated user to potentially enab… |
CVE-2022-24378 | Medium | 5.5 | 2022-08-18 | Improper initialization in the Intel(R) Data Center Manager software before version 4.1 may allow an authenticated user to potentially enable denial of service… |
CVE-2022-23403 | Medium | 5.5 | 2022-08-18 | Improper input validation in the Intel(R) Data Center Manager software before version 4.1 may allow an authenticated user to potentially enable denial of servi… |
CVE-2022-23182 | High | 8.8 | 2022-08-18 | Improper access control in the Intel(R) Data Center Manager software before version 4.1 may allow an unauthenticated user to potentially enable escalation of p… |
CVE-2022-22730 | Critical | 9.8 | 2022-08-18 | Improper authentication in the Intel(R) Edge Insights for Industrial software before version 2.6.1 may allow an unauthenticated user to potentially enable esca… |
CVE-2022-21812 | High | 7.8 | 2022-08-18 | Improper access control in the Intel(R) HAXM software before version 7.7.1 may allow an authenticated user to potentially enable escalation of privilege via lo… |
CVE-2022-21807 | High | 7.8 | 2022-08-18 | Uncontrolled search path elements in the Intel(R) VTune(TM) Profiler software before version 2022.2.0 may allow an authenticated user to potentially enable esc… |
CVE-2022-21793 | Medium | 5.5 | 2022-08-18 | Insufficient control flow management in the Intel(R) Ethernet 500 Series Controller drivers for VMWare before version 1.11.4.0 and in the Intel(R) Ethernet 700… |
CVE-2022-21240 | Medium | 4.4 | 2022-08-18 | Out of bounds read for some Intel(R) PROSet/Wireless WiFi products may allow a privileged user to potentially enable information disclosure via local access. |
CVE-2022-21233 | Medium | 5.5 | 2022-08-18 | Improper isolation of shared resources in some Intel(R) Processors may allow a privileged user to potentially enable information disclosure via local access. |
CVE-2022-21229 | High | 7.8 | 2022-08-18 | Improper buffer restrictions for some Intel(R) NUC 9 Extreme Laptop Kit drivers before version 2.2.0.22 may allow an authenticated user to potentially enable e… |
CVE-2022-21225 | High | 8.0 | 2022-08-18 | Improper neutralization in the Intel(R) Data Center Manager software before version 4.1 may allow an authenticated user to potentially enable escalation of pri… |
CVE-2022-21212 | Medium | 6.5 | 2022-08-18 | Improper input validation for some Intel(R) PROSet/Wireless WiFi products may allow an unauthenticated user to potentially enable denial of service via adjacen… |
CVE-2022-21197 | High | 7.5 | 2022-08-18 | Improper input validation for some Intel(R) PROSet/Wireless WiFi products may allow an unauthenticated user to potentially enable denial of service via network… |
CVE-2022-21181 | High | 7.8 | 2022-08-18 | Improper input validation for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi products may allow a privileged user to potentially enable escalation of p… |
CVE-2022-21172 | Medium | 6.7 | 2022-08-18 | Out of bounds write for some Intel(R) PROSet/Wireless WiFi products may allow a privileged user to potentially enable escalation of privilege via local access. |
CVE-2022-21160 | High | 7.5 | 2022-08-18 | Improper buffer restrictions for some Intel(R) PROSet/Wireless WiFi products may allow an unauthenticated user to potentially enable denial of service via netw… |
CVE-2022-21152 | Medium | 5.5 | 2022-08-18 | Improper access control in the Intel(R) Edge Insights for Industrial software before version 2.6.1 may allow an authenticated user to potentially enable inform… |
CVE-2022-21148 | High | 7.8 | 2022-08-18 | Improper access control in the Intel(R) Edge Insights for Industrial software before version 2.6.1 may allow an authenticated user to potentially enable escala… |
CVE-2022-21140 | Medium | 5.5 | 2022-08-18 | Improper access control for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi products may allow a privileged user to potentially enable information discl… |
CVE-2022-21139 | High | 8.8 | 2022-08-18 | Inadequate encryption strength for some Intel(R) PROSet/Wireless WiFi products may allow an unauthenticated user to potentially enable escalation of privilege… |
CVE-2021-44545 | Medium | 6.5 | 2022-08-18 | Improper input validation for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi products may allow an unauthenticated user to potentially enable denial of… |
CVE-2021-44470 | Medium | 5.5 | 2022-08-18 | Incorrect default permissions for the Intel(R) Connect M Android application before version 1.7.4 may allow an authenticated user to potentially enable informa… |
CVE-2021-37409 | High | 7.8 | 2022-08-18 | Improper access control for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi products may allow a privileged user to potentially enable escalation of pri… |
CVE-2021-33847 | High | 7.8 | 2022-08-18 | Improper buffer restrictions in firmware for some Intel(R) Wireless Bluetooth(R) and Killer(TM) Bluetooth(R) products before version 22.120 may allow an authen… |
CVE-2021-33128 | Medium | 4.4 | 2022-08-18 | Improper access control in the firmware for some Intel(R) E810 Ethernet Controllers before version 1.6.0.6 may allow a privileged user to potentially enable de… |
CVE-2021-33126 | Medium | 4.4 | 2022-08-18 | Improper access control in the firmware for some Intel(R) 700 and 722 Series Ethernet Controllers and Adapters before versions 8.5 and 1.5.5 may allow a privil… |
CVE-2021-33060 | High | 7.8 | 2022-08-18 | Out-of-bounds write in the BIOS firmware for some Intel(R) Processors may allow an authenticated user to potentially enable escalation of privilege via local a… |
CVE-2021-26950 | Medium | 5.5 | 2022-08-18 | Out of bounds read in firmware for some Intel(R) Wireless Bluetooth(R) and Killer(TM) Bluetooth(R) products before version 22.120 may allow an authenticated us… |
CVE-2021-26257 | Medium | 5.5 | 2022-08-18 | Improper buffer restrictions in firmware for some Intel(R) Wireless Bluetooth(R) and Killer(TM) Bluetooth(R) products before version 22.120 may allow an authen… |
CVE-2021-26254 | Medium | 5.5 | 2022-08-18 | Out of bounds read for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi products may allow a privileged user to potentially enable denial of service via… |
CVE-2021-23223 | High | 7.8 | 2022-08-18 | Improper initialization for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi products may allow a privileged user to potentially enable escalation of pri… |
CVE-2021-23188 | Low | 3.3 | 2022-08-18 | Improper access control for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi products may allow an authenticated user to potentially enable information d… |
CVE-2021-23179 | High | 7.1 | 2022-08-18 | Out of bounds read in firmware for some Intel(R) Wireless Bluetooth(R) and Killer(TM) Bluetooth(R) products before version 22.120 may allow a privileged user t… |
CVE-2021-23168 | Medium | 6.5 | 2022-08-18 | Out of bounds read for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi products may allow an unauthenticated user to potentially enable denial of servic… |
CVE-2022-32293 | High | 8.1 | 2022-08-03 | In ConnMan through 1.41, a man-in-the-middle attack against a WISPR HTTP query could be used to trigger a use-after-free in WISPR handling, leading to crashes… |