CVE-2022-43507: DEPRECATED: Improper Sanitization of Custom Special Characters

Improper buffer restrictions in the IntelR QAT Engine for OpenSSL before version 0.6.16 may allow a privileged user to potentially enable escalation of privilege via network access...

CVE-2022-41687: Insecure Inherited Permissions

Insecure inherited permissions in the HotKey Services for some IntelR NUC P14E Laptop Element software for Windows 10 before version 1.1.44 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-41769: Improper Access Control

Improper access control in the IntelR Connect M Android application before version 1.82 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-41646: Insufficient Control Flow Management

Insufficient control flow management in the IntelR IPP Cryptography software before version 2021.6 may allow an unauthenticated user to potentially enable information disclosure via local access...

CVE-2022-42465: Improper Access Control

Improper access control in kernel mode driver for the IntelR OFU software before version 14.1.30 may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2022-43474: Uncontrolled Search Path Element

Uncontrolled search path for the DSP Builder software installer before version 22.4 for IntelR FPGAs Pro Edition may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-40971: Incorrect Default Permissions

Incorrect default permissions for the IntelR HDMI Firmware Update Tool for NUC before version 1.79.1.1 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-38103: Insecure Inherited Permissions

Insecure inherited permissions in the IntelR NUC Software Studio Service installer before version 1.17.38.0 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-38087: Exposure of Resource to Wrong Sphere

Exposure of resource to wrong sphere in BIOS firmware for some IntelR Processors may allow a privileged user to potentially enable information disclosure via local access...

CVE-2022-38787: Improper Input Validation

Improper input validation in firmware for some IntelR FPGA products before version 2.7.0 Hotfix may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2023-25175: Improper Input Validation

Improper input validation in some IntelR Server Board BMC firmware before version 2.90 may allow a privileged user to enable information disclosure via local access...

CVE-2023-25772: Improper Input Validation

Improper input validation in the IntelR Retail Edge Mobile Android application before version 3.0.301126-RELEASE may allow an authenticated user to potentially enable denial of service via local access...

CVE-2022-40207: Improper Access Control

Improper access control in the IntelR SUR software before version 2.4.8989 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-36339: Improper Input Validation

Improper input validation in firmware for IntelR NUC 8 Compute Element, IntelR NUC 11 Compute Element, IntelR NUC 12 Compute Element may allow a privileged user to enable escalation of privilege via local access...

CVE-2023-24475: Out-of-bounds Read

Out of bounds read in some IntelR Server Board BMC firmware before version 2.90 may allow a privileged user to enable information disclosure via local access...

CVE-2022-36391: Incorrect Default Permissions

Incorrect default permissions for the IntelR NUC Pro Software Suite before version 2.0.0.3 may allow an authenticated user to potentially enable escalation of privilege via local access...

PT-2023-14219

Name of the Vulnerable Software and Affected Versions IntelR FPGAs Pro Edition DSP Builder software versions prior to 22.4 Description The issue concerns an uncontrolled search path in the software installer, which may allow an authenticated user to potentially enable escalation of privilege via...

PT-2023-18471

Name of the Vulnerable Software and Affected Versions IntelR Server Board BMC firmware versions prior to 2.90 Description The issue is related to improper input validation, which may allow a privileged user to enable information disclosure via local access. Recommendations For versions prior to...

PT-2023-21699

Name of the Vulnerable Software and Affected Versions IntelR Server Board BMC firmware versions prior to 2.90 Description The issue is related to a double free in the firmware, which may allow a privileged user to enable information disclosure via local access. Recommendations For versions prior ...

CVE-2022-41979: Protection Mechanism Failure

Protection mechanism failure in the IntelR DCM software before version 5.1 may allow an authenticated user to potentially enable escalation of privilege via network access...