CVE-2022-36794: Improper Check for Unusual or Exceptional Conditions

Improper condition check in some IntelR SPS firmware before version SPSE306.00.03.300.0 may allow a privileged user to potentially enable denial of service via local access...

CVE-2022-33190: Improper Input Validation

Improper input validation in the IntelR SUR software before version 2.4.8902 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-30704: Improper Initialization

Improper initialization in the IntelR TXT SINIT ACM for some IntelR Processors may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2022-26840: Undefined Security Weakness

Improper neutralization in the IntelR Quartus Prime Pro and Standard edition software may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-33902: Undefined Security Weakness

Insufficient control flow management in the IntelR Quartus Prime Pro and Standard edition software may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-25992: Incorrect Permission Assignment for Critical Resource

Insecure inherited permissions in the IntelR oneAPI Toolkits oneapi-cli before version 0.2.0 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-26343: Undefined Security Weakness

Improper access control in the BIOS firmware for some IntelR Processors may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2022-26032: Uncontrolled Search Path Element

Uncontrolled search path element in the IntelR Distribution for Python programming language before version 2022.1 for IntelR oneAPI Toolkits may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-26841: Undefined Security Weakness

Insufficient control flow management for the IntelR SGX SDK software for Linux before version 2.16.100.1 may allow an authenticated user to potentially enable information disclosure via local access...

CVE-2022-26509: Improper Handling of Exceptional Conditions

Improper conditions check in the IntelR SGX SDK software may allow a privileged user to potentially enable information disclosure via local access...

CVE-2022-26888: Improper Neutralization of Input During Web Page Generation

Cross-site scripting in the IntelR Quartus Prime Pro and Standard edition software may allow an authenticated user to potentially enable information disclosure via local access...

CVE-2022-38056: Undefined Security Weakness

Improper neutralization in the IntelR EMA software before version 1.8.1.0 may allow a privileged user to potentially enable escalation of privilege via network access...

CVE-2022-32570: Improper Authentication

Improper authentication in the IntelR Quartus Prime Pro and Standard edition software may allow an authenticated user to potentially enable escalation of privilege via local access...

PT-2023-12854

Name of the Vulnerable Software and Affected Versions IntelR MPI Library versions prior to 2021.6 for IntelR oneAPI HPC Toolkit Description The issue is related to an uncontrolled search path element in the IntelR MPI Library, which may allow an authenticated user to potentially enable escalation...

PT-2023-12871

Name of the Vulnerable Software and Affected Versions IntelR oneAPI Collective Communications Library oneCCL versions prior to 2021.6 Description The issue is related to an uncontrolled search path element in the IntelR oneAPI Collective Communications Library oneCCL that may allow an authenticat...

CVE-2022-21216: Undefined Security Weakness

Insufficient granularity of access control in out-of-band management in some IntelR Atom and Intel Xeon Scalable Processors may allow a privileged user to potentially enable escalation of privilege via adjacent network access...

CVE-2022-38090: Insecure Storage of Sensitive Information

Improper isolation of shared resources in some IntelR Processors when using IntelR Software Guard Extensions may allow a privileged user to potentially enable information disclosure via local access...

CVE-2022-26062: Uncontrolled Search Path Element

Uncontrolled search path element in the IntelR Trace Analyzer and Collector before version 2021.6 for IntelR oneAPI HPC Toolkit may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-26345: Uncontrolled Search Path Element

Uncontrolled search path element in the IntelR oneAPI Toolkit OpenMP before version 2022.1 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-25905: Uncontrolled Search Path Element

Uncontrolled search path element in the IntelR oneAPI Data Analytics Library oneDAL before version 2021.5 for IntelR oneAPI Base Toolkit may allow an authenticated user to potentially enable escalation of privilege via local access...