CVE-2024-41917: Time-of-check Time-of-use (TOCTOU) Race Condition

Time-of-check time-of-use race condition for some IntelR Battery Life Diagnostic Tool software before version 2.4.1 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-28047: Improper Input Validation

Improper input validation in UEFI firmware for some IntelR Processors may allow a privileged user to potentially enable information disclosure via local access...

CVE-2024-39606: Improper Input Validation

Improper input validation in some IntelR PROSet/Wireless WiFi and Killerâ„¢ WiFi software for Windows before version 23.80 may allow an unauthenticated user to potentially enable denial of service via adjacent access...

CVE-2024-31068: Improper Finite State Machines (FSMs) in Hardware Logic

Improper Finite State Machines FSMs in Hardware Logic for some IntelR Processors may allow privileged user to potentially enable denial of service via local access...

CVE-2024-31157: Improper Initialization

Improper initialization in UEFI firmware OutOfBandXML module in some IntelR Processors may allow a privileged user to potentially enable information disclosure via local access...

CVE-2024-39279: Insufficient Granularity of Access Control

Insufficient granularity of access control in UEFI firmware in some IntelR processors may allow a authenticated user to potentially enable denial of service via local access...

CVE-2023-43758: Improper Input Validation

Improper input validation in UEFI firmware for some IntelR processors may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2024-39372: Uncontrolled Search Path Element

Uncontrolled search path for the IntelR XTU software for Windows before version 7.14.2.14 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-47006: Uncontrolled Search Path Element

Uncontrolled search path for the IntelR RealSense D400 Series Universal Windows Platform UWP Driver for WindowsR 10 all versions may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-41168: Use After Free

Use after free in some IntelR PROSet/Wireless WiFi and Killerâ„¢ WiFi software for Windows before version 23.80 may allow an unauthenticated user to potentially enable denial of service via adjacent access...

CVE-2024-36291: Uncontrolled Search Path Element

Uncontrolled search path for some IntelR Chipset Software Installation Utility before version 10.1.19867.8574 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-37355: Improper Access Control

Improper access control in some IntelR Graphics software may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2025-20097: Uncaught Exception

Uncaught exception in OpenBMC Firmware for the IntelR Server M50FCP Family and IntelR Server D50DNP Family before version R01.02.0002 may allow an authenticated user to potentially enable denial of service via network access...

CVE-2023-48366: Concurrent Execution using Shared Resource with Improper Synchronization

Race condition in some IntelR System Security Report and System Resources Defense firmware may allow a privileged user to potentially enable information disclosure via local access...

CVE-2024-42492: Uncontrolled Search Path Element

Uncontrolled search path element in some BIOS and System Firmware Update Package for IntelR Server M50FCP family before version R01.02.0002 may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2023-34440: Improper Input Validation

Improper input validation in UEFI firmware for some IntelR Processors may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2024-39271: Improper Restriction of Communication Channel to Intended Endpoints

Improper restriction of communication channel to intended endpoints in some IntelR PROSet/Wireless WiFi and Killerâ„¢ WiFi software before version 23.80 may allow an unauthenticated user to potentially enable information disclosure via adjacent access...

CVE-2024-25571: Improper Input Validation

Improper input validation in some IntelR SPS firmware before SPSE506.01.04.059.0 may allow a privileged user to potentially enable denial of service via local access...

CVE-2024-41166: Stack-based Buffer Overflow

Stack-based buffer overflow in some IntelR PROSet/Wireless WiFi and Killerâ„¢ WiFi software for Windows before version 23.80 may allow an unauthenticated user to potentially enable denial of service via adjacent access...

CVE-2024-26021: Improper Initialization

Improper initialization in the firmware for some IntelR AMT and IntelR Standard Manageability may allow a privileged user to potentially enable information disclosure via local access...