CVE-2022-36391: Incorrect Default Permissions

Incorrect default permissions for the IntelR NUC Pro Software Suite before version 2.0.0.3 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2023-23573: Improper Access Control

Improper access control in the IntelR UniteR android application before Release 17 may allow a privileged user to potentially enable information disclosure via local access...

CVE-2023-27382: Incorrect Default Permissions

Incorrect default permissions in the Audio Service for some IntelR NUC P14E Laptop Element software for Windows 10 before version 1.0.0.156 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-41646: Insufficient Control Flow Management

Insufficient control flow management in the IntelR IPP Cryptography software before version 2021.6 may allow an unauthenticated user to potentially enable information disclosure via local access...

CVE-2022-34147: Improper Input Validation

Improper input validation in BIOS firmware for some IntelR NUC 9 Extreme Laptop Kits, IntelR NUC Performance Kits, IntelR NUC Performance Mini PC, IntelR NUC 8 Compute Element, IntelR NUC Pro Kit, IntelR NUC Pro Board, and IntelR NUC Compute Element may allow a privileged user to potentially enab...

CVE-2023-25772: Improper Input Validation

Improper input validation in the IntelR Retail Edge Mobile Android application before version 3.0.301126-RELEASE may allow an authenticated user to potentially enable denial of service via local access...

CVE-2022-32766: Improper Input Validation

Improper input validation for some IntelR BIOS firmware may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2022-41610: Improper Authorization

Improper authorization in IntelR EMA Configuration Tool before version 1.0.4 and IntelR MC before version 2.4 software may allow an authenticated user to potentially enable denial of service via local access...

CVE-2023-22355: Uncontrolled Search Path Element

Uncontrolled search path in some IntelR oneAPI Toolkit and component software installers before version 4.3.0.251 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-40974: Incomplete Cleanup

Incomplete cleanup in the IntelR IPP Cryptography software before version 2021.6 may allow a privileged user to potentially enable information disclosure via local access...

CVE-2022-41693: Uncontrolled Search Path Element

Uncontrolled search path in the IntelR QuartusR Prime Pro edition software before version 22.3 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2023-22379: Improper Input Validation

Improper input validation in some IntelR Server Board BMC firmware before version 2.90 may allow a privileged user to enable information disclosure via local access...

CVE-2022-41687: Insecure Inherited Permissions

Insecure inherited permissions in the HotKey Services for some IntelR NUC P14E Laptop Element software for Windows 10 before version 1.1.44 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-42465: Improper Access Control

Improper access control in kernel mode driver for the IntelR OFU software before version 14.1.30 may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2023-24475: Out-of-bounds Read

Out of bounds read in some IntelR Server Board BMC firmware before version 2.90 may allow a privileged user to enable information disclosure via local access...

CVE-2023-25179: Uncontrolled Resource Consumption

Uncontrolled resource consumption in the IntelR UniteR android application before Release 17 may allow an authenticated user to potentially enable denial of service via local access...

CVE-2023-25776: Improper Input Validation

Improper input validation in some IntelR Server Board BMC firmware before version 2.90 may allow a privileged user to enable information disclosure via local access...

PT-2023-14038

Name of the Vulnerable Software and Affected Versions IntelR Connect M Android application versions prior to 1.82 Description The issue is related to uncontrolled resource consumption, which may allow an authenticated user to potentially enable denial of service via local access. Recommendations...

PT-2023-14050

Name of the Vulnerable Software and Affected Versions IntelR DCM software versions prior to 5.1 Description The issue is related to a protection mechanism failure in the IntelR DCM software, which may allow an authenticated user to potentially enable escalation of privilege via network access...

PT-2023-20295

Name of the Vulnerable Software and Affected Versions IntelR Server Board BMC firmware versions prior to 2.90 Description The issue is related to improper input validation in the firmware, which may allow a privileged user to enable information disclosure via local access. Recommendations For...