CVE-2024-33225: Improper Control of Generation of Code

An issue in the component RTKVHD64.sys of Realtek Semiconductor Corp Realtekr High Definition Audio Function Driver v6.0.9549.1 allows attackers to escalate privileges and execute arbitrary code via sending crafted IOCTL requests...

CVE-2023-52775

In the Linux kernel, the following vulnerability has been resolved: net/smc: avoid data corruption caused by decline We found a data corruption issue during testing of SMC-R on Redis applications. The benchmark has a low probability of reporting a strange error as shown below. "Error: Protocol...

CVE-2023-52775

CVE-2023-52775 is a Linux kernel vulnerability affecting net/smc where a Decline message could cross or collide in SMC-R, causing data corruption during Redis/SRC testing. A patch doubles the client timeout to 2x the server value to prevent cross‑timeout conflicts; remediation is upgrading to a k...

CVE-2023-52775: Out-of-bounds Write

In the Linux kernel, the following vulnerability has been resolved: net/smc: avoid data corruption caused by decline We found a data corruption issue during testing of SMC-R on Redis applications. The benchmark has a low probability of reporting a strange error as shown below. "Error: Protocol...

The vulnerability of the R programming language interpreter, related to deficiencies in the deserialization mechanism, allows attackers to execute arbitrary code in the target system.

The vulnerability of the R programming language interpreter is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows a malicious actor to execute arbitrary code on the target system using specially created RDS and .rdx files...

CVE-2024-21841

Uncontrolled search path for some IntelR Distribution for GDB software before version 2024.0 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-21818

Uncontrolled search path in some IntelR PCM software before version 202311 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2023-35192

CVE-2023-35192 concerns Intel GPA Framework (and Intel GPA software) prior to version 2023.3, where an uncontrolled search path may allow an authenticated local user to escalate privileges. The vulnerability is described in Intel’s advisory (Intel-SA-00831) and corresponds to a local-privilege-es...

CVE-2023-48727

CVE-2023-48727 affects Intel oneVPL software prior to 23.3.5. The root cause is a NULL pointer dereference that may allow an authenticated local attacker to disclose information. The issue is rated low (CVSS 3.1: 3.3) with local attack vector and no user interaction. Remediation details are not p...

CVE-2023-41092

Unchecked return value in SDM firmware for IntelR Stratix 10 and IntelR Agilex 7 FPGAs before version 23.3 may allow an authenticated user to potentially enable denial of service via adjacent access...

CVE-2024-22379

CVE-2024-22379 affects Intel® Inspector software (and HPC Toolkit) prior to version 2024.0, due to an uncontrolled search path that could let an authenticated local user escalate privileges. Impact is local and requires user interaction; CVSS base metrics indicate a Medium severity with high impa...

CVE-2024-21788

Uncontrolled search path in some IntelR GPA software before version 2023.4 may allow an authenticated user to potentially enable escalation of privilege via local access...

PT-2024-13426

Name of the Vulnerable Software and Affected Versions IntelR PROSet/Wireless WiFi software for linux versions prior to 23.20 Description The issue is related to improper input validation, which may allow an unauthenticated user to potentially enable denial of service via adjacent access...

CVE-2023-38581: Buffer Copy without Checking Size of Input

Buffer overflow in IntelR Power Gadget software for Windows all versions may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-21843: Uncontrolled Search Path Element

Uncontrolled search path for some IntelR Computing Improvement Program software before version 2.4.0.10654 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-21835: Insecure Inherited Permissions

Insecure inherited permissions in some IntelR XTU software before version 7.14.0.15 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-21774: Uncontrolled Search Path Element

Uncontrolled search path in some IntelR Processor Identification Utility software before versions 6.10.34.1129, 7.1.6 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2023-28402: Improper Input Validation

Improper input validation in some IntelR BIOS Guard firmware may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2023-40155: Uncontrolled Search Path Element

Uncontrolled search path for some IntelR CST software before version 2.1.10300 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2023-40070: Improper Access Control

Improper access control in some IntelR Power Gadget software for macOS all versions may allow an authenticated user to potentially enable escalation of privilege via local access...