CVE-2020-8753: Out-of-bounds Read

Out-of-bounds read in DHCP subsystem for IntelR AMT, IntelR ISM versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70 and 14.0.45 may allow an unauthenticated user to potentially enable information disclosure via network access...

CVE-2020-12336: Initialization of a Resource with an Insecure Default

Insecure default variable initialization in firmware for some IntelR NUCs may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2020-12345: Improper Preservation of Permissions

Improper permissions in the installer for the IntelR Data Center Manager Console before version 3.6.2 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2020-8754: Out-of-bounds Read

Out-of-bounds read in subsystem for IntelR AMT, IntelR ISM versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70 and 14.0.45 may allow an unauthenticated user to potentially enable information disclosure via network access...

CVE-2020-8767: Improper Handling of Exceptional Conditions

Uncaught exception in the IntelR 50GbE IP Core for IntelR Quartus Prime before version 20.2 may allow an authenticated user to potentially enable denial of service via local access...

CVE-2020-8752: Out-of-bounds Write

Out-of-bounds write in IPv6 subsystem for IntelR AMT, IntelR ISM versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70, 14.0.45 may allow an unauthenticated user to potentially enable escalation of privileges via network access...

CVE-2020-8766: Improper Check for Unusual or Exceptional Conditions

Improper conditions check in the IntelR SGX DCAP software before version 1.6 may allow an unauthenticated user to potentially enable denial of service via adjacent access...

CVE-2020-8749: Out-of-bounds Read

Out-of-bounds read in subsystem for IntelR AMT versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70 and 14.0.45 may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access...

CVE-2020-12303: Use After Free

Use after free in DAL subsystem for IntelR CSME versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70, 13.0.40, 13.30.10, 14.0.45 and 14.5.25, IntelR TXE 3.1.80, 4.0.30 may allow an authenticated user to potentially enable escalation of privileges via local access...

CVE-2020-8694: Undefined Security Weakness

Insufficient access control in the Linux kernel driver for some IntelR Processors may allow an authenticated user to potentially enable information disclosure via local access...

CVE-2020-8693: Undefined Security Weakness

Improper buffer restrictions in the firmware of the IntelR Ethernet 700 Series Controllers may allow a privileged user to potentially enable escalation of privilege and/or denial of service via local access...

PT-2020-4655

Name of the Vulnerable Software and Affected Versions IntelR Visual Compute Accelerator 2, all versions Description The issue is related to improper access control, which may allow a privileged user to potentially enable escalation of privilege via local access. This is due to deficiencies in...

PT-2020-4735

Name of the Vulnerable Software and Affected Versions: IntelR CSME versions prior to 13.0.40 IntelR CSME versions prior to 13.30.10 Description: The issue is related to inadequate encryption strength in a subsystem, which may allow an unauthenticated user to potentially enable information...

PT-2020-4915

Name of the Vulnerable Software and Affected Versions: IntelR HID Event Filter Driver versions all Description: The issue is related to improper permissions in the installer for the IntelR HID Event Filter Driver. This may allow an authenticated user to potentially enable escalation of privilege...

PT-2020-4674

Name of the Vulnerable Software and Affected Versions IntelR Client SSDs affected versions not specified IntelR Data Center SSDs affected versions not specified Description The issue is related to insufficient control flow management in the firmware of some Intel SSDs, which may allow an...

PT-2020-4783

Name of the Vulnerable Software and Affected Versions: IntelR PROSet/Wireless WiFi versions prior to 21.110 Description: The issue is related to improper buffer restriction in IntelR PROSet/Wireless WiFi products, which may allow an unauthenticated user to potentially enable denial of service via...

PT-2020-4781

Name of the Vulnerable Software and Affected Versions: IntelR PROSet/Wireless WiFi versions prior to 21.110 Description: The issue is related to insufficient control flow management in some IntelR PROSet/Wireless WiFi products. This may allow an unauthenticated user to potentially enable denial o...

PT-2020-6019

Name of the Vulnerable Software and Affected Versions IntelR Falcon 8+ UAS AscTec Thermal Viewer affected versions not specified Description The issue is related to improper permissions in the installer, which may allow an authenticated user to potentially enable escalation of privilege via local...

PT-2020-4782

Name of the Vulnerable Software and Affected Versions: IntelR PROSet/Wireless WiFi versions prior to 21.110 Description: The issue is related to a protection mechanism failure and errors in security settings in Intel PROSet/Wireless WiFi utility, which may allow an authenticated user to potential...

PT-2020-4900

Name of the Vulnerable Software and Affected Versions: IntelR Processors affected versions not specified Description: The issue is related to an out of bounds write in Intel BIOS platform sample code, which may allow a privileged user to potentially enable escalation of privilege via local access...