CVE-2024-31074: Observable Timing Discrepancy

Observable timing discrepancy in some IntelR QAT Engine for OpenSSL software before version v1.6.1 may allow information disclosure via network access...

CVE-2024-21853: Improper Finite State Machines (FSMs) in Hardware Logic

Improper finite state machines FSMs in the hardware logic in some 4th and 5th Generation IntelR XeonR Processors may allow an authorized user to potentially enable denial of service via local access...

CVE-2024-23918: DEPRECATED: Improper Sanitization of Custom Special Characters

Improper conditions check in some IntelR XeonR processor memory controller configurations when using IntelR SGX may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2024-35201: Incorrect Default Permissions

Incorrect default permissions in the IntelR SDP Tool for Windows software all versions may allow an authenticated user to enable escalation of privilege via local access...

CVE-2024-29076: Uncaught Exception

Uncaught exception for some IntelR CST software before version 8.7.10803 may allow an authenticated user to potentially enable denial of service via local access...

CVE-2024-33611: Improper Input Validation

Improper input validation for some IntelR PROSet/Wireless WiFi software for Windows before version 23.60 may allow a privileged user to potentially enable denial of service via local access...

CVE-2024-35245: Uncontrolled Search Path Element

Uncontrolled search path element in some IntelR PROSet/Wireless WiFi software for Windows before version 23.60 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-36245: Uncontrolled Search Path Element

Uncontrolled search path element in some IntelR VTuneTM Profiler software before version 2024.2.0 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-21799: Improper Limitation of a Pathname to a Restricted Directory

Path traversal for some IntelR Extension for Transformers software before version 1.5 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-37024: Uncontrolled Search Path Element

Uncontrolled search path for some ACAT software maintained by IntelR for Windows before version 3.11.0 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-33624: Improper Input Validation

Improper input validation for some IntelR PROSet/Wireless WiFi software for Windows before version 23.60 may allow an unauthenticated user to potentially enable denial of service via network access...

CVE-2024-39766: Improper Neutralization of Special Elements Used in a Template Engine

Improper neutralization of special elements used in SQL command in some IntelR Neural Compressor software before version v3.0 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-34167: Uncontrolled Search Path Element

Uncontrolled search path for the IntelR Server Board S2600ST Family BIOS and Firmware Update software all versions may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-38387: Uncontrolled Search Path Element

Uncontrolled search path in the IntelR Graphics Driver installers for versions 15.40 and 15.45 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-25647: Incorrect Default Permissions

Incorrect default permissions for some IntelR Binary Configuration Tool software for Windows before version 3.4.5 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-32044: Improper Access Control

Improper access control for some IntelR ArcTM Pro Graphics for Windows drivers before version 31.0.101.5319 may allow an authenticated user to potentially enable escalation of privilege via adjacent access...

CVE-2024-39368: Improper Neutralization of Special Elements used in an SQL Command

Improper neutralization of special elements used in an SQL command 'SQL Injection' in some IntelR Neural Compressor software before version v3.0 may allow an authenticated user to potentially enable escalation of privilege via adjacent access...

CVE-2024-36242: Protection Mechanism Failure

Protection mechanism failure in the SPP for some IntelR Processors may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-34023: Untrusted Pointer Dereference

Untrusted pointer dereference in some IntelR Graphics Drivers may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-33617: Insufficient Control Flow Management

Insufficient control flow management in some IntelR QAT Engine for OpenSSL software before version v1.6.1 may allow information disclosure via network access...