CVE-2022-0002: Undefined Security Weakness

Non-transparent sharing of branch predictor within a context in some IntelR Processors may allow an authorized user to potentially enable information disclosure via local access...

CVE-2021-33150: Undefined Security Weakness

Hardware allows activation of test or debug logic at runtime for some IntelR Trace Hub instances which may allow an unauthenticated user to potentially enable escalation of privilege via physical access...

CVE-2022-0001: Undefined Security Weakness

Non-transparent sharing of branch predictor selectors between contexts in some IntelR Processors may allow an authorized user to potentially enable information disclosure via local access...

Updated nonfree firmware packages fix security vulnerabilities

This update provides new and updated nonfree firmwares and fixes at least the following security issues: Improper input validation in firmware for IntelR PROSet/Wireless Wi-Fi may allow an unauthenticated user to potentially enable escalation of privilege via local access CVE-2021-0066 / SA-00539...

CVE-2021-33101

Uncontrolled search path in the IntelR GPA software before version 21.2 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2021-0060

Insufficient compartmentalization in HECI subsystem for the IntelR SPS before versions SPSE504.01.04.516.0, SPSE504.04.04.033.0, SPSE504.04.03.281.0, SPSE503.01.03.116.0, SPSE305.01.04.309.0, SPS02.04.00.101.0, SPSSoC-A05.00.03.114.0, SPSSoC-X04.00.04.326.0, SPSSoC-X03.00.03.117.0,...

Information disclosure

Incorrect default permissions for the IntelR RXT for Chromebook application, all versions, may allow an authenticated user to potentially enable information disclosure via local access...

Input validation

Improper Use of Validation Framework in firmware for some IntelR PROSet/Wireless Wi-Fi in multiple operating systems and some KillerTM Wi-Fi in Windows 10 and 11 may allow a unauthenticated user to potentially enable denial of service via adjacent access...

Privilege escalation

Uncontrolled search path in the IntelR GPA software before version 21.2 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-21153

Improper access control in the IntelR Capital Global Summit Android application may allow an authenticated user to potentially enable information disclosure via local access...

CVE-2021-33107

Insufficiently protected credentials in USB provisioning for IntelR AMT SDK before version 16.0.3, IntelR SCS before version 12.2 and IntelR MEBx before versions 11.0.0.0012, 12.0.0.0011, 14.0.0.0004 and 15.0.0.0004 may allow an unauthenticated user to potentially enable information disclosure vi...

CVE-2021-23152

CVE-2021-23152 affects Intel® Advisor software prior to 2021.2. It is a local, authenticated-access vulnerability caused by improper access control that could allow privilege escalation (impact: high for confidentiality, integrity, and availability). The NVD CVSSv3.1 base score is 7.8 (HIGH); CVS...

CVE-2021-0116

Out-of-bounds write in the firmware for some IntelR Processors may allow a privileged user to potentially enable an escalation of privilege via local access...

CVE-2021-33166: Incorrect Default Permissions

Incorrect default permissions for the IntelR RXT for Chromebook application, all versions, may allow an authenticated user to potentially enable information disclosure via local access...

CVE-2021-33147: Improper Check for Unusual or Exceptional Conditions

Improper conditions check in the IntelR IPP Crypto library before version 2021.2 may allow an authenticated user to potentially enable information disclosure via local access...

CVE-2021-33129: Incorrect Default Permissions

Incorrect default permissions in the software installer for the IntelR Advisor before version 2021.4.0 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2021-0092: Uncontrolled Resource Consumption

Improper access control in the firmware for some IntelR Processors may allow a privileged user to potentially enable a denial of service via local access...

CVE-2021-0164: Undefined Security Weakness

Improper access control in firmware for IntelR PROSet/Wireless Wi-Fi in multiple operating systems and KillerTM Wi-Fi in Windows 10 and 11 may allow an unauthenticated user to potentially enable escalation of privilege via local access...

CVE-2021-0072: Improper Input Validation

Improper input validation in firmware for some IntelR PROSet/Wireless Wi-Fi in multiple operating systems and some KillerTM Wi-Fi in Windows 10 and 11 may allow a privileged user to potentially enable information disclosure via local access...

CVE-2021-0168: Improper Input Validation

Improper input validation in firmware for some IntelR PROSet/Wireless Wi-Fi in multiple operating systems and some KillerTM Wi-Fi in Windows 10 and 11 may allow a privileged user to potentially enable escalation of privilege via local access...