Intel
Page 9 of 19 — Intel CVEs from a corpus of 1842, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-32292 | Critical | 9.8 | 2022-08-03 | In ConnMan through 1.41, remote attackers able to send HTTP requests to the gweb component are able to exploit a heap-based buffer overflow in received_data to… |
CVE-2022-29901 | Medium | 5.6 | 2022-07-12 | Intel microprocessor generations 6 to 8 are affected by a new Spectre variant that is able to bypass their retpoline mitigation in the kernel to leak arbitrary… |
CVE-2022-24436 | Medium | 6.5 | 2022-06-15 | Observable behavioral in power management throttling for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure… |
CVE-2022-21180 | Medium | 5.5 | 2022-06-15 | Improper input validation for some Intel(R) Processors may allow an authenticated user to potentially cause a denial of service via local access. |
CVE-2022-21166 | Medium | 5.5 | 2022-06-15 | Incomplete cleanup in specific special register write operations for some Intel(R) Processors may allow an authenticated user to potentially enable information… |
CVE-2022-21127 | Medium | 5.5 | 2022-06-15 | Incomplete cleanup in specific special register read operations for some Intel(R) Processors may allow an authenticated user to potentially enable information… |
CVE-2022-21125 | Medium | 5.5 | 2022-06-15 | Incomplete cleanup of microarchitectural fill buffers on some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure… |
CVE-2022-21123 | Medium | 5.5 | 2022-06-15 | Incomplete cleanup of multi-core shared buffers for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via l… |
CVE-2022-24382 | Medium | 6.7 | 2022-05-12 | Improper input validation in firmware for some Intel(R) NUCs may allow a privileged user to potentially enable escalation of privilege via local access. |
CVE-2022-24297 | Medium | 6.7 | 2022-05-12 | Improper buffer restrictions in firmware for some Intel(R) NUCs may allow a privileged user to potentially enable escalation of privilege via local access. |
CVE-2022-22139 | High | 7.3 | 2022-05-12 | Uncontrolled search path in the Intel(R) XTU software before version 7.3.0.33 may allow an authenticated user to potentially enable escalation of privilege via… |
CVE-2022-21237 | Medium | 6.7 | 2022-05-12 | Improper buffer access in firmware for some Intel(R) NUCs may allow a privileged user to potentially enable escalation of privilege via local access. |
CVE-2022-21151 | Medium | 5.5 | 2022-05-12 | Processor optimization removal or modification of security-critical code for some Intel(R) Processors may allow an authenticated user to potentially enable inf… |
CVE-2022-21136 | Medium | 5.5 | 2022-05-12 | Improper input validation for some Intel(R) Xeon(R) Processors may allow a privileged user to potentially enable denial of service via local access. |
CVE-2022-21131 | Medium | 5.5 | 2022-05-12 | Improper access control for some Intel(R) Xeon(R) Processors may allow an authenticated user to potentially enable information disclosure via local access. |
CVE-2022-21128 | High | 7.8 | 2022-05-12 | Insufficient control flow management in the Intel(R) Advisor software before version 7.6.0.37 may allow an authenticated user to potentially enable escalation… |
CVE-2022-0005 | Low | 2.4 | 2022-05-12 | Sensitive information accessible by physical probing of JTAG interface for some Intel(R) Processors with SGX may allow an unprivileged user to potentially enab… |
CVE-2022-0004 | Medium | 6.8 | 2022-05-12 | Hardware debug modes and processor INIT setting that allow override of locks for some Intel(R) Processors in Intel(R) Boot Guard and Intel(R) TXT may allow an… |
CVE-2021-33149 | Medium | 5.5 | 2022-05-12 | Observable behavioral discrepancy in some Intel(R) Processors may allow an authorized user to potentially enable information disclosure via local access. |
CVE-2021-33135 | Medium | 5.5 | 2022-05-12 | Uncontrolled resource consumption in the Linux kernel drivers for Intel(R) SGX may allow an authenticated user to potentially enable denial of service via loca… |
CVE-2021-33130 | Medium | 4.6 | 2022-05-12 | Insecure default variable initialization of Intel(R) RealSense(TM) ID Solution F450 before version 2.6.0.74 may allow an unauthenticated user to potentially en… |
CVE-2021-33124 | Medium | 6.7 | 2022-05-12 | Out-of-bounds write in the BIOS authenticated code module for some Intel(R) Processors may allow a privileged user to potentially enable aescalation of privile… |
CVE-2021-33123 | High | 7.8 | 2022-05-12 | Improper access control in the BIOS authenticated code module for some Intel(R) Processors may allow a privileged user to potentially enable aescalation of pri… |
CVE-2021-33122 | High | 7.8 | 2022-05-12 | Insufficient control flow management in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable aescalation of privile… |
CVE-2021-33117 | Medium | 5.5 | 2022-05-12 | Improper access control for some 3rd Generation Intel(R) Xeon(R) Scalable Processors before BIOS version MR7, may allow a local attacker to potentially enable… |
CVE-2021-33108 | Medium | 6.7 | 2022-05-12 | Improper input validation in the Intel(R) In-Band Manageability software before version 2.13.0 may allow a privileged user to potentially enable escalation of… |
CVE-2021-33103 | Medium | 6.7 | 2022-05-12 | Unintended intermediary in the BIOS authenticated code module for some Intel(R) Processors may allow a privileged user to potentially enable aescalation of pri… |
CVE-2021-33083 | Medium | 4.4 | 2022-05-12 | Improper authentication in firmware for some Intel(R) SSD, Intel(R) Optane(TM) SSD, Intel(R) Optane(TM) SSD DC and Intel(R) SSD DC Products may allow an privil… |
CVE-2021-33082 | Medium | 4.6 | 2022-05-12 | Sensitive information in resource not removed before reuse in firmware for some Intel(R) SSD and Intel(R) Optane(TM) SSD Products may allow an unauthenticated… |
CVE-2021-33080 | Medium | 6.8 | 2022-05-12 | Exposure of sensitive system information due to uncleared debug information in firmware for some Intel(R) SSD DC, Intel(R) Optane(TM) SSD and Intel(R) Optane(T… |
CVE-2021-33078 | Medium | 4.7 | 2022-05-12 | Race condition within a thread in firmware for some Intel(R) Optane(TM) SSD and Intel(R) SSD DC Products may allow a privileged user to potentially enable deni… |
CVE-2021-33077 | Medium | 6.8 | 2022-05-12 | Insufficient control flow management in firmware for some Intel(R) SSD, Intel(R) Optane(TM) SSD and Intel(R) SSD DC Products may allow an unauthenticated user… |
CVE-2021-33075 | Medium | 4.7 | 2022-05-12 | Race condition in firmware for some Intel(R) Optane(TM) SSD, Intel(R) Optane(TM) SSD DC and Intel(R) SSD DC Products may allow a privileged user to potentially… |
CVE-2021-33074 | Medium | 4.6 | 2022-05-12 | Protection mechanism failure in firmware for some Intel(R) SSD, Intel(R) SSD DC and Intel(R) Optane(TM) SSD Products may allow an unauthenticated user to poten… |
CVE-2021-33069 | Medium | 5.5 | 2022-05-12 | Improper resource shutdown or release in firmware for some Intel(R) SSD, Intel(R) SSD DC, Intel(R) Optane(TM) SSD and Intel(R) Optane(TM) SSD DC may allow a pr… |
CVE-2021-26258 | High | 7.8 | 2022-05-12 | Improper access control for the Intel(R) Killer(TM) Control Center software before version 2.4.3337.0 may allow an authorized user to potentially enable escala… |
CVE-2021-0194 | High | 7.2 | 2022-05-12 | Improper access control in the Intel(R) In-Band Manageability software before version 2.13.0 may allow a privileged user to potentially enable escalation of pr… |
CVE-2021-0190 | High | 7.8 | 2022-05-12 | Uncaught exception in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable aescalation of privilege via local acces… |
CVE-2021-0189 | High | 7.8 | 2022-05-12 | Use of out-of-range pointer offset in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable aescalation of privilege… |
CVE-2021-0188 | High | 7.8 | 2022-05-12 | Return of pointer value outside of expected range in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable aescalati… |
CVE-2021-0159 | High | 7.8 | 2022-05-12 | Improper input validation in the BIOS authenticated code module for some Intel(R) Processors may allow a privileged user to potentially enable aescalation of p… |
CVE-2021-0155 | Medium | 5.5 | 2022-05-12 | Unchecked return value in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable information disclosure via local acc… |
CVE-2021-0154 | High | 7.8 | 2022-05-12 | Improper input validation in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable aescalation of privilege via loca… |
CVE-2021-0153 | High | 7.8 | 2022-05-12 | Out-of-bounds write in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable aescalation of privilege via local acce… |
CVE-2021-0126 | High | 8.0 | 2022-05-12 | Improper input validation for the Intel(R) Manageability Commander before version 2.2 may allow an authenticated user to potentially enable escalation of privi… |
CVE-2022-0002 | Medium | 6.5 | 2022-03-11 | Non-transparent sharing of branch predictor within a context in some Intel(R) Processors may allow an authorized user to potentially enable information disclos… |
CVE-2022-0001 | Medium | 6.5 | 2022-03-11 | Non-transparent sharing of branch predictor selectors between contexts in some Intel(R) Processors may allow an authorized user to potentially enable informati… |
CVE-2021-33150 | Medium | 6.8 | 2022-03-11 | Hardware allows activation of test or debug logic at runtime for some Intel(R) Trace Hub instances which may allow an unauthenticated user to potentially enabl… |
CVE-2022-21226 | Medium | 5.5 | 2022-02-09 | Out-of-bounds read in the Intel(R) Trace Analyzer and Collector before version 2021.5 may allow an authenticated user to potentially enable information disclos… |
CVE-2022-21220 | High | 7.8 | 2022-02-09 | Improper restriction of XML external entity for Intel(R) Quartus(R) Prime Pro Edition before version 21.3 may allow an authenticated user to potentially enable… |
CVE-2022-21218 | Medium | 5.5 | 2022-02-09 | Uncaught exception in the Intel(R) Trace Analyzer and Collector before version 2021.5 may allow an authenticated user to potentially enable information disclos… |
CVE-2022-21205 | High | 7.5 | 2022-02-09 | Improper restriction of XML external entity reference in DSP Builder Pro for Intel(R) Quartus(R) Prime Pro Edition before version 21.3 may allow an unauthentic… |
CVE-2022-21204 | High | 7.8 | 2022-02-09 | Improper permissions for Intel(R) Quartus(R) Prime Pro Edition before version 21.3 may allow an authenticated user to potentially enable escalation of privileg… |
CVE-2022-21203 | High | 7.8 | 2022-02-09 | Improper permissions in the SafeNet Sentinel driver for Intel(R) Quartus(R) Prime Standard Edition before version 21.1 may allow an authenticated user to poten… |
CVE-2022-21174 | High | 7.8 | 2022-02-09 | Improper access control in a third-party component of Intel(R) Quartus(R) Prime Pro Edition before version 21.3 may allow an authenticated user to potentially… |
CVE-2022-21157 | Medium | 5.5 | 2022-02-09 | Improper access control in the Intel(R) Smart Campus Android application before version 6.1 may allow authenticated user to potentially enable information disc… |
CVE-2022-21156 | Medium | 5.5 | 2022-02-09 | Access of uninitialized pointer in the Intel(R) Trace Analyzer and Collector before version 2021.5 may allow an authenticated user to potentially enable denial… |
CVE-2022-21153 | Medium | 5.5 | 2022-02-09 | Improper access control in the Intel(R) Capital Global Summit Android application may allow an authenticated user to potentially enable information disclosure… |
CVE-2022-21133 | Medium | 5.5 | 2022-02-09 | Out-of-bounds read in the Intel(R) Trace Analyzer and Collector before version 2021.5 may allow an authenticated user to potentially enable denial of service v… |
CVE-2021-44454 | High | 7.8 | 2022-02-09 | Improper input validation in a third-party component for Intel(R) Quartus(R) Prime Pro Edition before version 21.3 may allow an authenticated user to potential… |
CVE-2021-33166 | Medium | 5.5 | 2022-02-09 | Incorrect default permissions for the Intel(R) RXT for Chromebook application, all versions, may allow an authenticated user to potentially enable information… |
CVE-2021-33155 | Medium | 5.7 | 2022-02-09 | Improper input validation in firmware for some Intel(R) Wireless Bluetooth(R) and Killer(TM) Bluetooth(R) products before version 22.100 may allow an authentic… |
CVE-2021-33147 | Medium | 5.5 | 2022-02-09 | Improper conditions check in the Intel(R) IPP Crypto library before version 2021.2 may allow an authenticated user to potentially enable information disclosure… |
CVE-2021-33139 | Medium | 5.7 | 2022-02-09 | Improper conditions check in firmware for some Intel(R) Wireless Bluetooth(R) and Killer(TM) Bluetooth(R) products before version 22.100 may allow an authentic… |
CVE-2021-33137 | High | 7.8 | 2022-02-09 | Out-of-bounds write in the Intel(R) Kernelflinger project may allow an authenticated user to potentially enable escalation of privilege via local access. |
CVE-2021-33129 | High | 7.8 | 2022-02-09 | Incorrect default permissions in the software installer for the Intel(R) Advisor before version 2021.4.0 may allow an authenticated user to potentially enable… |
CVE-2021-33120 | Medium | 5.4 | 2022-02-09 | Out of bounds read under complex microarchitectural condition in memory subsystem for some Intel Atom(R) Processors may allow authenticated user to potentially… |
CVE-2021-33119 | Medium | 5.5 | 2022-02-09 | Improper access control in the Intel(R) RealSense(TM) DCM before version 20210625 may allow an authenticated user to potentially enable information disclosure… |
CVE-2021-33115 | High | 8.8 | 2022-02-09 | Improper input validation for some Intel(R) PROSet/Wireless WiFi in UEFI may allow an unauthenticated user to potentially enable escalation of privilege via ad… |
CVE-2021-33114 | Medium | 5.7 | 2022-02-09 | Improper input validation for some Intel(R) PROSet/Wireless WiFi in multiple operating systems and Killer(TM) WiFi in Windows 10 and 11 may allow an authentica… |
CVE-2021-33113 | High | 8.1 | 2022-02-09 | Improper input validation for some Intel(R) PROSet/Wireless WiFi in multiple operating systems and Killer(TM) WiFi in Windows 10 and 11 may allow an unauthenti… |
CVE-2021-33110 | Medium | 6.5 | 2022-02-09 | Improper input validation for some Intel(R) Wireless Bluetooth(R) products and Killer(TM) Bluetooth(R) products in Windows 10 and 11 before version 22.80 may a… |
CVE-2021-33107 | Medium | 4.6 | 2022-02-09 | Insufficiently protected credentials in USB provisioning for Intel(R) AMT SDK before version 16.0.3, Intel(R) SCS before version 12.2 and Intel(R) MEBx before… |
CVE-2021-33105 | Medium | 5.5 | 2022-02-09 | Out-of-bounds read in some Intel(R) Core(TM) processors with Radeon(TM) RX Vega M GL integrated graphics before version 21.10 may allow an authenticated user t… |
CVE-2021-33101 | High | 7.8 | 2022-02-09 | Uncontrolled search path in the Intel(R) GPA software before version 21.2 may allow an authenticated user to potentially enable escalation of privilege via loc… |
CVE-2021-33096 | Medium | 5.5 | 2022-02-09 | Improper isolation of shared resources in network on chip for the Intel(R) 82599 Ethernet Controllers and Adapters may allow an authenticated user to potential… |
CVE-2021-33068 | Medium | 6.5 | 2022-02-09 | Null pointer dereference in subsystem for Intel(R) AMT before versions 15.0.35 may allow an authenticated user to potentially enable denial of service via netw… |
CVE-2021-33061 | Medium | 5.5 | 2022-02-09 | Insufficient control flow management for the Intel(R) 82599 Ethernet Controllers and Adapters may allow an authenticated user to potentially enable denial of s… |
CVE-2021-23152 | High | 7.8 | 2022-02-09 | Improper access control in the Intel(R) Advisor software before version 2021.2 may allow an authenticated user to potentially enable escalation of privilege vi… |
CVE-2021-0183 | Medium | 6.5 | 2022-02-09 | Improper Validation of Specified Index, Position, or Offset in Input in software for some Intel(R) PROSet/Wireless Wi-Fi in multiple operating systems and some… |
CVE-2021-0179 | Medium | 6.5 | 2022-02-09 | Improper Use of Validation Framework in software for Intel(R) PROSet/Wireless Wi-Fi and Killer(TM) Wi-Fi in Windows 10 and 11 may allow an unauthenticated user… |
CVE-2021-0178 | Medium | 6.5 | 2022-02-09 | Improper input validation in software for Intel(R) PROSet/Wireless Wi-Fi and Killer(TM) Wi-Fi in Windows 10 and 11 may allow an unauthenticated user to potenti… |
CVE-2021-0177 | Medium | 6.5 | 2022-02-09 | Improper Validation of Consistency within input in software for Intel(R) PROSet/Wireless Wi-Fi and Killer(TM) Wi-Fi in Windows 10 and 11 may allow an unauthent… |
CVE-2021-0176 | Medium | 4.4 | 2022-02-09 | Improper input validation in firmware for some Intel(R) PROSet/Wireless Wi-Fi in multiple operating systems and some Killer(TM) Wi-Fi in Windows 10 and 11 may… |
CVE-2021-0175 | Medium | 6.5 | 2022-02-09 | Improper Validation of Specified Index, Position, or Offset in Input in firmware for some Intel(R) PROSet/Wireless Wi-Fi in multiple operating systems and some… |
CVE-2021-0174 | Medium | 6.5 | 2022-02-09 | Improper Use of Validation Framework in firmware for some Intel(R) PROSet/Wireless Wi-Fi in multiple operating systems and some Killer(TM) Wi-Fi in Windows 10… |
CVE-2021-0173 | Medium | 6.5 | 2022-02-09 | Improper Validation of Consistency within input in firmware for some Intel(R) PROSet/Wireless Wi-Fi in multiple operating systems and some Killer(TM) Wi-Fi in… |
CVE-2021-0172 | Medium | 6.5 | 2022-02-09 | Improper input validation in firmware for some Intel(R) PROSet/Wireless Wi-Fi in multiple operating systems and some Killer(TM) Wi-Fi in Windows 10 and 11 may… |
CVE-2021-0171 | Medium | 5.5 | 2022-02-09 | Improper access control in software for Intel(R) PROSet/Wireless Wi-Fi and Killer(TM) Wi-Fi in Windows 10 and 11 may allow an authenticated user to potentially… |
CVE-2021-0170 | Medium | 5.5 | 2022-02-09 | Exposure of Sensitive Information to an Unauthorized Actor in firmware for some Intel(R) PROSet/Wireless Wi-Fi in multiple operating systems and some Killer(TM… |
CVE-2021-0169 | Medium | 6.7 | 2022-02-09 | Uncontrolled Search Path Element in software for Intel(R) PROSet/Wireless Wi-Fi in Windows 10 and 11 may allow a privileged user to potentially enable escalati… |
CVE-2021-0168 | Medium | 6.7 | 2022-02-09 | Improper input validation in firmware for some Intel(R) PROSet/Wireless Wi-Fi in multiple operating systems and some Killer(TM) Wi-Fi in Windows 10 and 11 may… |
CVE-2021-0167 | Medium | 6.7 | 2022-02-09 | Improper access control in software for Intel(R) PROSet/Wireless Wi-Fi and Killer(TM) Wi-Fi in Windows 10 and 11 may allow a privileged user to potentially ena… |
CVE-2021-0166 | Medium | 6.7 | 2022-02-09 | Exposure of Sensitive Information to an Unauthorized Actor in firmware for some Intel(R) PROSet/Wireless Wi-Fi in multiple operating systems and some Killer(TM… |
CVE-2021-0165 | Medium | 6.5 | 2022-02-09 | Improper input validation in firmware for Intel(R) PROSet/Wireless Wi-Fi in multiple operating systems and Killer(TM) Wi-Fi in Windows 10 and 11 may allow an u… |
CVE-2021-0164 | High | 7.8 | 2022-02-09 | Improper access control in firmware for Intel(R) PROSet/Wireless Wi-Fi in multiple operating systems and Killer(TM) Wi-Fi in Windows 10 and 11 may allow an una… |
CVE-2021-0163 | High | 8.8 | 2022-02-09 | Improper Validation of Consistency within input in software for Intel(R) PROSet/Wireless Wi-Fi and Killer(TM) Wi-Fi in Windows 10 and 11 may allow an unauthent… |
CVE-2021-0162 | High | 8.8 | 2022-02-09 | Improper input validation in software for Intel(R) PROSet/Wireless Wi-Fi and Killer(TM) Wi-Fi in Windows 10 and 11 may allow an unauthenticated user to potenti… |
CVE-2021-0161 | Medium | 6.7 | 2022-02-09 | Improper input validation in firmware for Intel(R) PROSet/Wireless Wi-Fi in multiple operating systems and Killer(TM) Wi-Fi in Windows 10 and 11 may allow a pr… |
CVE-2021-0156 | High | 7.8 | 2022-02-09 | Improper input validation in the firmware for some Intel(R) Processors may allow an authenticated user to potentially enable an escalation of privilege via loc… |