CVE-2025-27711: Incorrect Default Permissions

Incorrect default permissions for some IntelR One Boot Flash Update IntelR OFU software before version 14.1.31 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable...

CVE-2023-25945: Protection Mechanism Failure

Protection mechanism failure in some IntelR OFU software before version 14.1.31 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2023-29161: Uncontrolled Search Path Element

Uncontrolled search path in some IntelR OFU software before version 14.1.31 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2023-29157: Improper Access Control

Improper access control in some IntelR OFU software before version 14.1.31 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2023-32204: Improper Access Control

Improper access control in some IntelR OFU software before version 14.1.31 may allow an authenticated user to potentially enable escalation of privilege via local access...

PT-2023-14120

Name of the Vulnerable Software and Affected Versions IntelR OFU software versions prior to 14.1.30 Description The issue is related to improper access control in kernel mode driver, which may allow a privileged user to potentially enable escalation of privilege via local access. Recommendations...

PT-2023-14036

Name of the Vulnerable Software and Affected Versions IntelR OFU software versions prior to 14.1.30 Description The issue is related to improper access control in kernel mode driver, which may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-41784: Improper Access Control

Improper access control in kernel mode driver for the IntelR OFU software before version 14.1.30 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-42465: Improper Access Control

Improper access control in kernel mode driver for the IntelR OFU software before version 14.1.30 may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2021-33104: Undefined Security Weakness

Improper access control in the IntelR OFU software before version 14.1.28 may allow an authenticated user to potentially enable denial of service via local access...