CVE-2019-0166: Improper Input Validation

Insufficient input validation in the subsystem for IntelR AMT before versions 11.8.70, 11.11.70, 11.22.70 and 12.0.45 may allow an unauthenticated user to potentially enable information disclosure via network access...

CVE-2019-11131: Undefined Security Weakness

Logic issue in subsystem in IntelR AMT before versions 11.8.70, 11.11.70, 11.22.70 and 12.0.45 may allow an unauthenticated user to potentially enable escalation of privilege via network access...

CVE-2019-11086: Improper Input Validation

Insufficient input validation in subsystem for IntelR AMT before version 12.0.45 may allow an unauthenticated user to potentially enable escalation of privilege via physical access...

CVE-2019-11090: Concurrent Execution using Shared Resource with Improper Synchronization

Cryptographic timing conditions in the subsystem for IntelR PTT before versions 11.8.70, 11.11.70, 11.22.70, 12.0.45, 13.0.0 and 14.0.10; IntelR TXE 3.1.70 and 4.0.20; IntelR SPS before versions SPSE504.01.04.305.0, SPSSoC-X04.00.04.108.0, SPSSoC-A04.00.04.191.0, SPSE304.01.04.086.0,...

CVE-2019-11097: Incorrect Default Permissions

Improper directory permissions in the installer for IntelR Management Engine Consumer Driver for Windows before versions 11.8.70, 11.11.70, 11.22.70, 12.0.45,13.0.10 and 14.0.10; IntelR TXE before versions 3.1.70 and 4.0.20 may allow an authenticated user to potentially enable escalation of...

CVE-2019-11110: Undefined Security Weakness

Authentication bypass in the subsystem for IntelR CSME before versions 11.8.70, 11.11.70, 11.22.70, 12.0.45, 13.0.10 and 14.0.10; IntelR TXE before versions 3.1.70 and 4.0.20 may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2019-11103: Improper Input Validation

Insufficient input validation in firmware update software for IntelR CSME before versions 12.0.45,13.0.10 and 14.0.10 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2019-11087: Improper Input Validation

Insufficient input validation in the subsystem for IntelR CSME before versions 11.8.70, 11.11.70, 11.22.70, 12.0.45, 13.0.10 and 14.0.10; IntelR TXE before versions 3.1.70 and 4.0.20 may allow a privileged user to potentially enable escalation of privilege, information disclosure or denial of...

CVE-2019-11105: Undefined Security Weakness

Logic issue in subsystem for IntelR CSME before versions 12.0.45, 13.0.10 and 14.0.10 may allow a privileged user to potentially enable escalation of privilege and information disclosure via local access...

CVE-2019-11106: Insufficient Session Expiration

Insufficient session validation in the subsystem for IntelR CSME before versions 11.8.70, 12.0.45, 13.0.10 and 14.0.10; IntelR TXE before versions 3.1.70 and 4.0.20 may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2019-14611

Intel NUC firmware vulnerability CVE-2019-14611 is an integer overflow in Intel NUC firmware that can enable privilege escalation via local access. The issue is documented in the Intel Intel-SA-00323 advisory, which coordinates mitigations across affected NUC models and firmware updates. NVD indi...

CVE-2019-11096: Undefined Security Weakness

Insufficient memory protection for IntelR Ethernet I218 Adapter driver for Windows 10 before version 24.1 may allow an authenticated user to potentially enable information disclosure via local access...

CVE-2019-14608: Improper Restriction of Operations within the Bounds of a Memory Buffer

Improper buffer restrictions in firmware for IntelR NUCR may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2019-0159: Undefined Security Weakness

Insufficient memory protection in the Linux Administrative Tools for IntelR Network Adapters before version 24.3 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2019-0134: Incorrect Default Permissions

Improper permissions in the IntelR Dynamic Platform and Thermal Framework v8.3.10208.5643 and before may allow an authenticated user to potentially execute code at an elevated level of privilege...

CVE-2019-11157: Undefined Security Weakness

Improper conditions check in voltage settings for some IntelR Processors may allow a privileged user to potentially enable escalation of privilege and/or information disclosure via local access...

CVE-2019-14568: Incorrect Default Permissions

Improper permissions in the executable for IntelR RST before version 17.7.0.1006 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2019-14611: Integer Overflow or Wraparound

Integer overflow in firmware for IntelR NUCR may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2019-14612: Out-of-bounds Write

Out of bounds write in firmware for IntelR NUCR may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2019-14605: Incorrect Default Permissions

Improper permissions in the installer for the IntelR SCS Platform Discovery Utility, all versions, may allow an authenticated user to potentially enable escalation of privilege via local attack...