CVE-2020-12295: Improper Input Validation

Improper input validation in some IntelR ThunderboltTM controllers may allow an authenticated user to potentially enable denial of service via local access...

CVE-2021-0073: Undefined Security Weakness

Insufficient control flow management in IntelR DSA before version 20.11.50.9 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2020-24515: Undefined Security Weakness

Protection mechanism failure in some IntelR RealSenseTM IDs may allow an unauthenticated user to potentially enable escalation of privilege via physical access...

CVE-2021-0089: Observable Discrepancy

Observable response discrepancy in some IntelR Processors may allow an authorized user to potentially enable information disclosure via local access...

CVE-2021-0104: Uncontrolled Search Path Element

Uncontrolled search path element in the installer for the IntelR Rapid Storage Technology software, before versions 17.9.0.34, 18.0.0.640 and 18.1.0.24, may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2020-24507: Improper Initialization

Improper initialization in a subsystem in the IntelR CSME versions before 11.8.86, 11.12.86, 11.22.86, 12.0.81, 13.0.47, 13.30.17, 14.1.53, 14.5.32, 13.50.11 and 15.0.22 may allow a privileged user to potentially enable information disclosure via local access...

CVE-2020-8703: Improper Restriction of Operations within the Bounds of a Memory Buffer

Improper buffer restrictions in a subsystem in the IntelR CSME versions before 11.8.86, 11.12.86, 11.22.86, 12.0.81, 13.0.47, 13.30.17, 14.1.53, 14.5.32 and 15.0.22 may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2020-24506: Out-of-bounds Read

Out of bound read in a subsystem in the IntelR CSME versions before 12.0.81, 13.0.47, 13.30.17, 14.1.53 and 14.5.32 may allow a privileged user to potentially enable information disclosure via local access...

CVE-2020-24516: Undefined Security Weakness

Modification of assumed-immutable data in subsystem in IntelR CSME versions before 13.0.47, 13.30.17, 14.1.53, 14.5.32, 15.0.22 may allow an unauthenticated user to potentially enable escalation of privilege via physical access...

CVE-2020-24489: Incomplete Cleanup

Incomplete cleanup in some IntelR VT-d products may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2020-12374: Buffer Copy without Checking Size of Input

Buffer overflow in the BMC firmware for some IntelR Server Boards, Server Systems and Compute Modules before version 2.47 may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2020-24481

Insecure inherited permissions for the IntelR Quartus Prime Pro and Standard edition software may allow an authenticated user to potentially enable escalation of privilege via local access...

Privilege escalation

Insecure inherited permissions for the IntelR SOC driver package for STK1A32SC before version 604 may allow an authenticated user to potentially enable escalation of privilege via local access...

Privilege escalation

Insecure inherited permissions for the IntelR Quartus Prime Pro and Standard edition software may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2020-8765

Incorrect default permissions in the installer for the IntelR RealSenseTM DCM may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2020-24504

Uncontrolled resource consumption in some IntelR Ethernet E810 Adapter drivers for Linux before version 1.0.4 may allow an authenticated user to potentially enable denial of service via local access...

CVE-2021-0109

Insecure inherited permissions for the IntelR SOC driver package for STK1A32SC before version 604 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2020-24498: Buffer Copy without Checking Size of Input

Buffer overflow in the firmware for IntelR E810 Ethernet Controllers before version 1.4.1.13 may allow a privileged user to potentially enable denial of service via local access...

CVE-2020-24496: Improper Input Validation

Insufficient input validation in the firmware for IntelR 722 Ethernet Controllers before version 1.4.3 may allow a privileged user to potentially enable denial of service via local access...

CVE-2021-0109: Incorrect Permission Assignment for Critical Resource

Insecure inherited permissions for the IntelR SOC driver package for STK1A32SC before version 604 may allow an authenticated user to potentially enable escalation of privilege via local access...