CVE-2023-27382

The CVE-2023-27382 issue affects Intel NUC P14E Laptop Element software for Windows 10, specifically the Audio Service. The root cause is incorrect default permissions that could allow an authenticated local user to escalate privileges. The vulnerable component is the Audio Service (and related a...

CVE-2022-29919: Use After Free

Use after free in the IntelR VROC software before version 7.7.6.1003 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2023-25776: Improper Input Validation

Improper input validation in some IntelR Server Board BMC firmware before version 2.90 may allow a privileged user to enable information disclosure via local access...

CVE-2023-25179: Uncontrolled Resource Consumption

Uncontrolled resource consumption in the IntelR UniteR android application before Release 17 may allow an authenticated user to potentially enable denial of service via local access...

CVE-2022-32766: Improper Input Validation

Improper input validation for some IntelR BIOS firmware may allow a privileged user to potentially enable escalation of privilege via local access...

PT-2023-19630

Name of the Vulnerable Software and Affected Versions IntelR Server Board BMC firmware versions prior to 2.90 Description The issue is related to an out of bounds read that may allow a privileged user to enable information disclosure via local access. Recommendations For versions prior to 2.90,...

CVE-2022-41699: Incorrect Permission Assignment for Critical Resource

Incorrect permission assignment for critical resource in some IntelR QAT drivers for Windows before version 1.9.0 may allow an authenticated user to potentially enable escalation of privilege via local access...

PT-2023-14035

Name of the Vulnerable Software and Affected Versions IntelR QAT drivers for Windows versions prior to 1.9.0 Description The issue is related to incorrect permission assignment for a critical resource in some IntelR QAT drivers for Windows, which may allow an authenticated user to potentially...

CVE-2022-45128: Improper Authorization

Improper authorization in the IntelR EMA software before version 1.9.0.0 may allow an authenticated user to potentially enable denial of service via local access...

CVE-2023-22355: Uncontrolled Search Path Element

Uncontrolled search path in some IntelR oneAPI Toolkit and component software installers before version 4.3.0.251 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-34855: Improper Limitation of a Pathname to a Restricted Directory

Path traversal for the IntelR NUC Pro Software Suite before version 2.0.0.3 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-41784: Improper Access Control

Improper access control in kernel mode driver for the IntelR OFU software before version 14.1.30 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-43475: Insecure Storage of Sensitive Information

Insecure storage of sensitive information in the IntelR DCM software before version 5.1 may allow an authenticated user to potentially enable escalation of privilege via local access...

PT-2023-14013

Name of the Vulnerable Software and Affected Versions IntelR NUC P14E Laptop Element software for Windows 10 versions prior to 1.1.44 Description Insecure inherited permissions in the HotKey Services may allow an authenticated user to potentially enable escalation of privilege via local access...

PT-2023-14038

Name of the Vulnerable Software and Affected Versions IntelR Connect M Android application versions prior to 1.82 Description The issue is related to uncontrolled resource consumption, which may allow an authenticated user to potentially enable denial of service via local access. Recommendations...

CVE-2022-41658: Insecure Inherited Permissions

Insecure inherited permissions in the IntelR VTuneTM Profiler software before version 2023.0 may allow an authenticated user to potentially enable escalation of privilege via local access...

PT-2023-14220

Name of the Vulnerable Software and Affected Versions IntelR DCM software versions prior to 5.1 Description The issue concerns insecure storage of sensitive information, potentially allowing an authenticated user to enable escalation of privilege via local access. Recommendations For versions pri...

CVE-2022-40685: Insufficiently Protected Credentials

Insufficiently protected credentials in the IntelR DCM software before version 5.0.1 may allow an authenticated user to potentially enable information disclosure via network access...

CVE-2022-21162: Uncontrolled Search Path Element

Uncontrolled search path for the IntelR HDMI Firmware Update tool for NUC before version 1.79.1.1 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-46645: Uncontrolled Resource Consumption

Uncontrolled resource consumption in the IntelR Smart Campus Android application before version 9.9 may allow an authenticated user to potentially enable denial of service via local access...