CVE-2023-25071

CVE-2023-25071 documents a NULL pointer dereference in Intel Graphics Drivers for Intel Arc™ & Iris™ Xe Graphics (WHQL) on Windows. Affects Windows drivers prior to version 31.0.101.4255; successful exploitation by an authenticated local user could enable a denial-of-service condition. Intel advi...

CVE-2023-25952

CVE-2023-25952 : Out-of-bounds write in Intel Arc Control software prior to version 1.73.5335.2 may allow an authenticated local user to cause a denial of service. Affected product: Intel Arc Control software. Root cause: out-of-bounds write. Impact: local denial of service (no confidentiality/in...

CVE-2022-42879

Consolidated view for CVE-2022-42879: A NULL pointer dereference in Intel Arc Control software prior to version 1.73.5335.2 may allow an authenticated local user to cause a denial of service. Affected product: Intel Arc Control software (Windows). Root cause: NULL pointer dereference in the contr...

CVE-2023-29165

CVE-2023-29165 affects Intel Arc™ Control software before version 1.73.5335.2. The issue is an unquoted search path/element that may allow a locally authenticated user to escalate privileges. Red Hat and Intel advisories corroborate the vulnerability and list the affected product as Intel Arc Con...

CVE-2023-28404: Out-of-bounds Read

Out-of-bounds read in the IntelR ArcTM & IrisR Xe Graphics - WHQL - Windows drivers before version 31.0.101.4255 may allow an authenticated user to potentially enable information disclosure via local access...

PT-2023-7283 · Intel · Intel Arc & Iris Xe Graphics - Whql - Windows Drivers

Name of the Vulnerable Software and Affected Versions: IntelR ArcTM & IrisR Xe Graphics - WHQL - Windows drivers versions prior to 31.0.101.4255 Description: The issue is related to an out-of-bounds read in the graphics drivers, which may allow an authenticated user to potentially enable...

PT-2023-7298 · Intel · Intel Arc Control +1

Name of the Vulnerable Software and Affected Versions: IntelR ArcTM Control software versions prior to 1.73.5335.2 IntelR ArcTM & IrisR Xe Graphics - WHQL - Windows drivers versions prior to 31.0.101.4255 Description: The issue is related to a NULL pointer dereference in the software, which may...

Intel® Graphics Drivers Advisory

Summary: Potential security vulnerabilities in some Intel® Graphics drivers may allow escalation of privilege, denial of service and information disclosure. Intel is releasing software updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2023-29165 Description:...

PT-2023-7281

Name of the Vulnerable Software and Affected Versions IntelR ArcTM Control software versions prior to 1.73.5335.2 IntelR ArcTM & IrisR Xe Graphics - WHQL - Windows drivers versions prior to 31.0.101.4255 Description The issue is related to an unquoted search path or element in some Intel software...

PT-2023-7284

Name of the Vulnerable Software and Affected Versions IntelR ArcTM & IrisR Xe Graphics - WHQL - Windows drivers versions prior to 31.0.101.4255 Description The issue is related to an out-of-bounds write in the graphics drivers, which may allow an authenticated user to potentially enable escalatio...

CVE-2023-25071: Use of NullPointerException Catch to Detect NULL Pointer Dereference

NULL pointer dereference in some IntelR ArcTM & IrisR Xe Graphics - WHQL - Windows Drviers before version 31.0.101.4255 may allow authenticated user to potentially enable denial of service via local access...

PT-2023-7286 · Intel · Intel Arc & Iris Xe Graphics - Whql - Windows Drivers

Name of the Vulnerable Software and Affected Versions: IntelR ArcTM & IrisR Xe Graphics - WHQL - Windows Drivers versions prior to 31.0.101.4255 Description: The issue is related to errors in pointer dereferencing, which can lead to a denial of service. An attacker could potentially exploit this ...

CVE-2023-28401: Out-of-bounds Write

Out-of-bounds write in some IntelR ArcTM & IrisR Xe Graphics - WHQL - Windows drivers before version 31.0.101.4255 may allow authenticated user to potentially enable escalation of privilege via local access...

CVE-2023-30615

Iris is a web collaborative platform aiming to help incident responders sharing technical details during investigations. A stored Cross-Site Scripting XSS vulnerability has been identified in iris-web, affecting multiple locations . The vulnerability in allows an attacker to inject malicious...

CVE-2023-30615 Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) in iris-web

Iris is a web collaborative platform aiming to help incident responders sharing technical details during investigations. A stored Cross-Site Scripting XSS vulnerability has been identified in iris-web, affecting multiple locations . The vulnerability in allows an attacker to inject malicious...

CVE-2023-30615

CVE-2023-30615 (iris-web) is a stored XSS vulnerability affecting iris-web before version 2.2.1. The issue allows an authenticated attacker to inject malicious scripts that run when users visit affected locations, with potential for unauthorized access and data theft. The patch is available in ir...

CVE-2023-30615 Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) in iris-web

Iris is a web collaborative platform aiming to help incident responders sharing technical details during investigations. A stored Cross-Site Scripting XSS vulnerability has been identified in iris-web, affecting multiple locations . The vulnerability in allows an attacker to inject malicious...

CVE-2023-30615

Iris is a web collaborative platform aiming to help incident responders sharing technical details during investigations. A stored Cross-Site Scripting XSS vulnerability has been identified in iris-web, affecting multiple locations . The vulnerability in allows an attacker to inject malicious...

Iris 跨站脚本漏洞

Iris is a fast, simple, yet full-featured and very efficient Go web framework. A security vulnerability exists in Iris versions prior to 2.2.1, which stems from the presence of a stored cross-site scripting XSS vulnerability that allows an attacker to inject malicious script into an application,...

CVE-2023-30615: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)

Iris is a web collaborative platform aiming to help incident responders sharing technical details during investigations. A stored Cross-Site Scripting XSS vulnerability has been identified in iris-web, affecting multiple locations . The vulnerability in allows an attacker to inject malicious...