CVE-2022-28126: Improper Input Validation

Improper input validation in some IntelR XMMTM 7560 Modem software before version M27560R01.2146.00 may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2022-26028: Uncontrolled Search Path Element

Uncontrolled search path in the IntelR VTuneTM Profiler software before version 2022.2.0 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-35276: Improper Access Control

Improper access control in BIOS firmware for some IntelR NUC 8 Compute Elements before version CBWHL357.0096 may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2022-26369: Out-of-bounds Read

Out-of-bounds read in some IntelR XMMTM 7560 Modem software before version M27560R01.2146.00 may allow a privileged user to potentially enable escalation of privilege via adjacent access...

CVE-2022-36367: Incorrect Default Permissions

Incorrect default permissions in the IntelR Support Android application before version v22.02.28 may allow a privileged user to potentially enable information disclosure via local access...

CVE-2022-30691: Uncontrolled Resource Consumption

Uncontrolled resource consumption in the IntelR Support Android application before version 22.02.28 may allow an authenticated user to potentially enable denial of service via local access...

CVE-2021-33159: Improper Authentication

Improper authentication in subsystem for IntelR AMT before versions 11.8.93, 11.22.93, 11.12.93, 12.0.92, 14.1.67, 15.0.42, 16.1.25 may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2022-30297: Improper Neutralization of Input During Web Page Generation

Cross-site scripting in the IntelR EMA software before version 1.8.0 may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2022-26341: Insufficiently Protected Credentials

Insufficiently protected credentials in software in IntelR AMT SDK before version 16.0.4.1, IntelR EMA before version 1.7.1 and IntelR MC before version 2.3.2 may allow an authenticated user to potentially enable escalation of privilege via network access...

CVE-2022-38099: Improper Input Validation

Improper input validation in BIOS firmware for some IntelR NUC 11 Compute Elements before version EBTGL357.0065 may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2022-28611: Improper Input Validation

Improper input validation in some IntelR XMMTM 7560 Modem software before version M27560R01.2146.00 may allow a privileged user to potentially enable escalation of privilege via physical access...

CVE-2022-26513: Out-of-bounds Write

Out-of-bounds write in some IntelR XMMTM 7560 Modem software before version M27560R01.2146.00 may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access...

CVE-2022-33942: Protection Mechanism Failure

Protection mechanism failure in the IntelR DCM software before version 5.0 may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access...

CVE-2022-27499: Operation on a Resource after Expiration or Release

Premature release of resource during expected lifetime in the IntelR SGX SDK software may allow a privileged user to potentially enable information disclosure via local access...

CVE-2022-26508: Improper Authentication

Improper authentication in the IntelR SDP Tool before version 3.0.0 may allow an unauthenticated user to potentially enable information disclosure via network access...

CVE-2022-21198: Time-of-check Time-of-use (TOCTOU) Race Condition

Time-of-check time-of-use race condition in the BIOS firmware for some IntelR Processors may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2022-25917: Improper Handling of Exceptional Conditions

Uncaught exception in the firmware for some IntelR Server Board M50CYP Family before version R01.01.0005 may allow a privileged user to potentially enable a denial of service via local access...

CVE-2022-29486: Improper Restriction of Operations within the Bounds of a Memory Buffer

Improper buffer restrictions in the Hyperscan library maintained by IntelR all versions downloaded before 04/29/2022 may allow an unauthenticated user to potentially enable escalation of privilege via network access...

CVE-2022-27638: Uncontrolled Search Path Element

Uncontrolled search path element in the IntelR Advanced Link Analyzer Pro before version 22.2 and Standard edition software before version 22.1.1 STD may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-27497: NULL Pointer Dereference

Null pointer dereference in firmware for IntelR AMT before version 11.8.93, 11.22.93, 11.12.93, 12.0.92, 14.1.67, 15.0.42, 16.1.25 may allow an unauthenticated user to potentially enable denial of service via network access...