CVE-2020-24511

Improper isolation of shared resources in some IntelR Processors may allow an authenticated user to potentially enable information disclosure via local access...

CVE-2020-12360

Out of bounds read in the firmware for some IntelR Processors may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2020-8670

CVE-2020-8670 is a race-condition flaw in Intel processor firmware that could allow a local privileged attack. No public exploits are known in the provided documents. Affected data indicates local access is required, with INTEL-SA advisories (INTEL-SA-00463) and related mitigations referenced by ...

PT-2021-9445

Name of the Vulnerable Software and Affected Versions IntelR ThunderboltTM controllers affected versions not specified Description The issue is related to improper access control in some IntelR ThunderboltTM controllers. This may allow an authenticated user to potentially enable denial of service...

CVE-2020-24515: Undefined Security Weakness

Protection mechanism failure in some IntelR RealSenseTM IDs may allow an unauthenticated user to potentially enable escalation of privilege via physical access...

CVE-2020-24507: Improper Initialization

Improper initialization in a subsystem in the IntelR CSME versions before 11.8.86, 11.12.86, 11.22.86, 12.0.81, 13.0.47, 13.30.17, 14.1.53, 14.5.32, 13.50.11 and 15.0.22 may allow a privileged user to potentially enable information disclosure via local access...

CVE-2020-24473: Out-of-bounds Write

Out of bounds write in the BMC firmware for some IntelR Server Boards, Server Systems and Compute Modules before version 2.48.ce3e3bd2 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2020-24474: Buffer Copy without Checking Size of Input

Buffer overflow in the BMC firmware for some IntelR Server Boards, Server Systems and Compute Modules before version 2.48.ce3e3bd2 may allow an authenticated user to potentially enable escalation of privilege via adjacent access...

CVE-2021-0098: Undefined Security Weakness

Improper access control in the Intel UniteR Client for Windows before version 4.2.25031 may allow an authenticated user to potentially enable an escalation of privilege via local access...

CVE-2021-0090: Uncontrolled Search Path Element

Uncontrolled search path element in IntelR DSA before version 20.11.50.9 may allow an authenticated user to potentially enable an escalation of privilege via local access...

CVE-2021-0001: Observable Discrepancy

Observable timing discrepancy in IntelR IPP before version 2020 update 1 may allow authorized user to potentially enable information disclosure via local access...

CVE-2021-0057: Uncontrolled Search Path Element

Uncontrolled search path in the IntelR NUC M15 Laptop Kit Driver Pack software before updated version 1.1 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2021-0070: Improper Input Validation

Improper input validation in the BMC firmware for IntelR Server Board M10JNP2SB before version EFI BIOS 7215, BMC 8100.01.08 may allow an unauthenticated user to potentially enable an escalation of privilege via adjacent access...

CVE-2021-0073: Undefined Security Weakness

Insufficient control flow management in IntelR DSA before version 20.11.50.9 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2020-8703: Improper Restriction of Operations within the Bounds of a Memory Buffer

Improper buffer restrictions in a subsystem in the IntelR CSME versions before 11.8.86, 11.12.86, 11.22.86, 12.0.81, 13.0.47, 13.30.17, 14.1.53, 14.5.32 and 15.0.22 may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2021-0132: Missing Release of Resource after Effective Lifetime

Missing release of resource after effective lifetime in an API for the IntelR Security Library before version 3.3 may allow a privileged user to potentially enable denial of service via network access...

CVE-2021-0131: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)

Use of cryptographically weak pseudo-random number generator PRNG in an API for the IntelR Security Library before version 3.3 may allow an authenticated user to potentially enable information disclosure via network access...

CVE-2021-0101: Buffer Copy without Checking Size of Input

Buffer overflow in the BMC firmware for IntelR Server BoardM10JNP2SB before version EFI BIOS 7215, BMC 8100.01.08 may allow an unauthenticated user to potentially enable an escalation of privilege via adjacent access...

CVE-2021-0105: Incorrect Permission Assignment for Critical Resource

Insecure inherited permissions in some IntelR ProSet/Wireless WiFi drivers may allow an authenticated user to potentially enable information disclosure and denial of service via adjacent access...

CVE-2021-0056: Incorrect Permission Assignment for Critical Resource

Insecure inherited permissions for the IntelR NUC M15 Laptop Kit Driver Pack software before updated version 1.1 may allow an authenticated user to potentially enable escalation of privilege via local access...