CVE-2022-27493: Improper Initialization

Improper initialization in the firmware for some IntelR NUC Laptop Kits before version BC0076 may allow a privileged user to potentially enable an escalation of privilege via local access...

CVE-2022-25999: Uncontrolled Search Path Element

Uncontrolled search path element in the IntelR EnpirionR Digital Power Configurator GUI software, all versions may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-21240: Out-of-bounds Read

Out of bounds read for some IntelR PROSet/Wireless WiFi products may allow a privileged user to potentially enable information disclosure via local access...

CVE-2022-34345: Improper Input Validation

Improper input validation in the firmware for some IntelR NUC Laptop Kits before version BC0076 may allow a privileged user to potentially enable escalation of privilege via physical access...

CVE-2022-26074: Incomplete Cleanup

Incomplete cleanup in a firmware subsystem for IntelR SPS before versions SPSE304.08.04.330.0 and SPSE304.01.04.530.0 may allow a privileged user to potentially enable denial of service via local access...

CVE-2022-21812: Undefined Security Weakness

Improper access control in the IntelR HAXM software before version 7.7.1 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-28696: Uncontrolled Search Path Element

Uncontrolled search path in the IntelR Distribution for Python before version 2022.0.3 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-26374: Uncontrolled Search Path Element

Uncontrolled search path in the installation binaries for IntelR SEAPI all versions may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-30944: Insufficiently Protected Credentials

Insufficiently protected credentials for IntelR AMT and IntelR Standard Manageability may allow a privileged user to potentially enable information disclosure via local access...

CVE-2022-34488: Improper Restriction of Operations within the Bounds of a Memory Buffer

Improper buffer restrictions in the firmware for some IntelR NUC Laptop Kits before version BC0076 may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2022-26844: Insufficiently Protected Credentials

Insufficiently protected credentials in the installation binaries for IntelR SEAPI in all versions may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-24378: Improper Initialization

Improper initialization in the IntelR Data Center Manager software before version 4.1 may allow an authenticated user to potentially enable denial of service via local access...

CVE-2022-26373

Non-transparent sharing of return predictor targets between contexts in some IntelR Processors may allow an authorized user to potentially enable information disclosure via local access...

CVE-2022-30601: Insufficiently Protected Credentials

Insufficiently protected credentials for IntelR AMT and IntelR Standard Manageability may allow an unauthenticated user to potentially enable information disclosure and escalation of privilege via network access...

CVE-2022-28709: Undefined Security Weakness

Improper access control in the firmware for some IntelR E810 Ethernet Controllers before version 1.6.1.9 may allow a privileged user to potentially enable denial of service via local access...

CVE-2022-21181

Improper input validation for some IntelR PROSet/Wireless WiFi and KillerTM WiFi products may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2022-21807: Uncontrolled Search Path Element

Uncontrolled search path elements in the IntelR VTuneTM Profiler software before version 2022.2.0 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-21212: Improper Input Validation

Improper input validation for some IntelR PROSet/Wireless WiFi products may allow an unauthenticated user to potentially enable denial of service via adjacent access...

PT-2022-19264

Name of the Vulnerable Software and Affected Versions IntelR NUC Laptop Kits versions prior to BC0076 Description The issue is related to improper buffer restriction in the firmware, which may allow a privileged user to potentially enable escalation of privilege via local access. Recommendations...

CVE-2022-32579: Improper Initialization

Improper initialization in the firmware for some IntelR NUC Laptop Kits before version BC0076 may allow a privileged user to potentially enable escalation of privilege via physical access...