CVE-2022-30539: Use After Free

Use after free in the BIOS firmware for some IntelR Processors may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2022-36794: Improper Check for Unusual or Exceptional Conditions

Improper condition check in some IntelR SPS firmware before version SPSE306.00.03.300.0 may allow a privileged user to potentially enable denial of service via local access...

CVE-2022-30692: Improper Check for Unusual or Exceptional Conditions

Improper conditions check in the IntelR SUR software before version 2.4.8902 may allow an unauthenticated user to potentially enable denial of service via network access...

CVE-2022-34854: Undefined Security Weakness

Improper access control in the IntelR SUR software before version 2.4.8902 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-33902: Undefined Security Weakness

Insufficient control flow management in the IntelR Quartus Prime Pro and Standard edition software may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-26888: Improper Neutralization of Input During Web Page Generation

Cross-site scripting in the IntelR Quartus Prime Pro and Standard edition software may allow an authenticated user to potentially enable information disclosure via local access...

CVE-2022-36348: Undefined Security Weakness

Active debug code in some Intel R SPS firmware before version SPSE504.04.04.300.0 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-34843: Integer Overflow or Wraparound

Integer overflow in the IntelR Trace Analyzer and Collector software before version 2021.5 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-26425: Uncontrolled Search Path Element

Uncontrolled search path element in the IntelR oneAPI Collective Communications Library oneCCL before version 2021.6 for IntelR oneAPI Base Toolkit may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-26052: Uncontrolled Search Path Element

Uncontrolled search path element in the IntelR MPI Library before version 2021.6 for IntelR oneAPI HPC Toolkit may allow an authenticated user to potentially enable escalation of privilege via local access...

PT-2023-12854

Name of the Vulnerable Software and Affected Versions IntelR MPI Library versions prior to 2021.6 for IntelR oneAPI HPC Toolkit Description The issue is related to an uncontrolled search path element in the IntelR MPI Library, which may allow an authenticated user to potentially enable escalation...

PT-2023-12871

Name of the Vulnerable Software and Affected Versions IntelR oneAPI Collective Communications Library oneCCL versions prior to 2021.6 Description The issue is related to an uncontrolled search path element in the IntelR oneAPI Collective Communications Library oneCCL that may allow an authenticat...

CVE-2022-32971: Improper Authentication

Improper authentication in the IntelR SUR software before version 2.4.8902 may allow a privileged user to potentially enable escalation of privilege via network access...

CVE-2022-36382: Out-of-bounds Write

Out-of-bounds write in firmware for some IntelR Ethernet Network Controllers and Adapters E810 Series before version 1.7.0.8 and some IntelR Ethernet 700 Series Controllers and Adapters before version 9.101 may allow a privileged user to potentially enable denial of service via local access...

CVE-2022-26032: Uncontrolled Search Path Element

Uncontrolled search path element in the IntelR Distribution for Python programming language before version 2022.1 for IntelR oneAPI Toolkits may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-38090: Insecure Storage of Sensitive Information

Improper isolation of shared resources in some IntelR Processors when using IntelR Software Guard Extensions may allow a privileged user to potentially enable information disclosure via local access...

CVE-2022-36398: Uncontrolled Search Path Element

Uncontrolled search path in the IntelR Battery Life Diagnostic Tool software before version 2.2.0 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-37329: Uncontrolled Search Path Element

Uncontrolled search path in some IntelR QuartusR Prime Pro and Standard Edition software may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-26840: Undefined Security Weakness

Improper neutralization in the IntelR Quartus Prime Pro and Standard edition software may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-32570: Improper Authentication

Improper authentication in the IntelR Quartus Prime Pro and Standard edition software may allow an authenticated user to potentially enable escalation of privilege via local access...