CVE-2019-11121: Incorrect Permission Assignment for Critical Resource

Improper file permissions in the installer for the IntelR Media SDK for Windows before version 2019 R1 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2020-12327: Initialization of a Resource with an Insecure Default

Insecure default variable initialization in some IntelR ThunderboltTM DCH drivers for Windows before version 72 may allow a privileged user to potentially enable information disclosure via local access...

CVE-2020-12321: Undefined Security Weakness

Improper buffer restriction in some IntelR Wireless BluetoothR products before version 21.110 may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access...

CVE-2020-8754: Out-of-bounds Read

Out-of-bounds read in subsystem for IntelR AMT, IntelR ISM versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70 and 14.0.45 may allow an unauthenticated user to potentially enable information disclosure via network access...

CVE-2020-12303: Use After Free

Use after free in DAL subsystem for IntelR CSME versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70, 13.0.40, 13.30.10, 14.0.45 and 14.5.25, IntelR TXE 3.1.80, 4.0.30 may allow an authenticated user to potentially enable escalation of privileges via local access...

CVE-2020-8696: Improper Removal of Sensitive Information Before Storage or Transfer

Improper removal of sensitive information before storage or transfer in some IntelR Processors may allow an authenticated user to potentially enable information disclosure via local access...

CVE-2020-24454: Improper Restriction of XML External Entity Reference

Improper Restriction of XML External Entity Reference in subsystem forIntelR QuartusR Prime Pro Edition before version 20.3 and IntelR QuartusR Prime Standard Edition before version 20.2 may allow unauthenticated user to potentially enable information disclosure via network access...

CVE-2020-8761: Inadequate Encryption Strength

Inadequate encryption strength in subsystem for IntelR CSME versions before 13.0.40 and 13.30.10 may allow an unauthenticated user to potentially enable information disclosure via physical access...

CVE-2020-8693: Undefined Security Weakness

Improper buffer restrictions in the firmware of the IntelR Ethernet 700 Series Controllers may allow a privileged user to potentially enable escalation of privilege and/or denial of service via local access...

CVE-2020-8755: Concurrent Execution using Shared Resource with Improper Synchronization

Race condition in subsystem for IntelR CSME versions before 12.0.70 and 14.0.45, IntelR SPS versions before E504.01.04.400 and E305.01.04.200 may allow an unauthenticated user to potentially enable escalation of privilege via physical access...

CVE-2020-0584: Buffer Copy without Checking Size of Input

Buffer overflow in firmware for IntelR SSD DC P4800X and P4801X Series, IntelR OptaneTM SSD 900P and 905P Series may allow an unauthenticated user to potentially enable a denial of service via local access...

CVE-2020-12332: Improper Preservation of Permissions

Improper permissions in the installer for the IntelR HID Event Filter Driver, all versions, may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2020-12346: Incorrect Default Permissions

Improper permissions in the installer for the IntelR Battery Life Diagnostic Tool before version 1.0.7 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2020-12314: Improper Input Validation

Improper input validation in some IntelR PROSet/Wireless WiFi products before version 21.110 may allow an unauthenticated user to potentially enable denial of service via adjacent access...

CVE-2020-12350: Undefined Security Weakness

Improper access control in the IntelR XTU before version 6.5.1.360 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2020-8694: Undefined Security Weakness

Insufficient access control in the Linux kernel driver for some IntelR Processors may allow an authenticated user to potentially enable information disclosure via local access...

CVE-2020-12306: Incorrect Default Permissions

Incorrect default permissions in the IntelR RealSenseTM D400 Series Dynamic Calibration Tool before version 2.11, may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2019-14557: Buffer Copy without Checking Size of Input

Buffer overflow in BIOS firmware for 8th, 9th, 10th Generation IntelR CoreTM, IntelR CeleronR Processor 4000 & 5000 Series Processors may allow an authenticated user to potentially enable elevation of privilege or denial of service via adjacent access...

CVE-2020-8671: Undefined Security Weakness

Insufficient control flow management in BIOS firmware 8th, 9th Generation IntelR CoreTM Processors and IntelR CeleronR Processor 4000 Series may allow an authenticated user to potentially enable information disclosure via local access...

CVE-2019-14556: Improper Initialization

Improper initialization in BIOS firmware for 8th, 9th, 10th Generation IntelR CoreTM, IntelR CeleronR Processor 4000 & 5000 Series Processors may allow a privileged user to potentially enable denial of service via local access...