PT-2020-11843

Name of the Vulnerable Software and Affected Versions IntelR Modular Server MFS2600KISPP Compute Module affected versions not specified Description The issue is related to an improper conditions check that may allow an unauthenticated user to potentially enable escalation of privilege via adjacen...

CVE-2020-0598: Untrusted Search Path

Uncontrolled search path in the installer for the IntelR Binary Configuration Tool for Windows, all versions, may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2020-0577: Undefined Security Weakness

Insufficient control flow for IntelR Modular Server MFS2600KISPP Compute Module may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access...

CVE-2020-0600: Undefined Security Weakness

Improper buffer restrictions in firmware for some IntelR NUC may allow an authenticated user to potentially enable escalation of privilege via local access...

PT-2020-5632

Name of the Vulnerable Software and Affected Versions IntelR PROSet/Wireless WiFi products versions prior to 21.70 Description The issue is related to improper buffer restrictions in the kernel mode driver, which may allow an unprivileged user to potentially enable denial of service via adjacent...

PT-2020-5634

Name of the Vulnerable Software and Affected Versions IntelR Modular Server MFS2600KISPP Compute Module affected versions not specified Description The issue is related to a buffer overflow in the IntelR Modular Server MFS2600KISPP Compute Module, which may allow an unauthenticated user to...

PT-2020-5637

Name of the Vulnerable Software and Affected Versions IntelR Binary Configuration Tool for Windows, all versions Description The issue is related to an uncontrolled search path in the installer, which may allow an authenticated user to potentially enable escalation of privilege via local access...

PT-2020-5618

Name of the Vulnerable Software and Affected Versions IntelR Data Migration Software versions 3.3 and earlier Description The issue is related to incorrect default permissions in the installer, which may allow an authenticated user to potentially enable escalation of privilege via local access...

USN-4302-1: Linux kernel vulnerabilities

Paulo Bonzini discovered that the KVM hypervisor implementation in the Linux kernel could improperly let a nested level 2 guest access the resources of a parent level 1 guest in certain situations. An attacker could use this to expose sensitive information. CVE-2020-2732 Gregory Herrero discovere...

USN-4301-1: Linux kernel vulnerabilities

It was discovered that the KVM implementation in the Linux kernel, when paravirtual TLB flushes are enabled in guests, the hypervisor in some situations could miss deferred TLB flushes or otherwise mishandle them. An attacker in a guest VM could use this to expose sensitive information read memor...

Design/Logic Flaw

Unquoted service path in IntelR OptaneTM DC Persistent Memory Module Management Software before version 1.0.0.3461 may allow an authenticated user to potentially enable escalation of privilege and denial of service via local access...

CVE-2020-0520

CVE-2020-0520 is a path traversal vulnerability in igdkmd64.sys affecting Intel Graphics Drivers prior to 15.45.30.5103, 15.40.44.5107, 15.36.38.5117 and 15.33.49.5100. The underlying issue allows an authenticated local attacker with low privileges to potentially escalate privileges or cause a De...

CVE-2020-0506

Improper initialization in IntelR Graphics Drivers before versions 15.40.44.5107, 15.45.29.5077, and 26.20.100.7000 may allow a privileged user to potentially enable a denial of service via local access...

CVE-2020-0583: Undefined Security Weakness

Improper access control in the subsystem for IntelR Smart Sound Technology may allow an authenticated user to potentially enable escalation of privilege via local access. This affects Intel® Smart Sound Technology before versions: 10th Generation Intel® Core™ i7 Processors, version 3431 and 8th...

CVE-2020-0526: Improper Input Validation

Improper input validation in firmware for IntelR NUC may allow a privileged user to potentially enable escalation of privilege via local access. The list of affected products is provided in intel-sa-00343: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00343.html...

CVE-2020-0550: Undefined Security Weakness

Improper data forwarding in some data cache for some IntelR Processors may allow an authenticated user to potentially enable information disclosure via local access. The list of affected products is provided in intel-sa-00330:...

CVE-2020-0530: Buffer Copy without Checking Size of Input

Improper buffer restrictions in firmware for IntelR NUC may allow an authenticated user to potentially enable escalation of privilege via local access. The list of affected products is provided in intel-sa-00343: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00343.html...

CVE-2020-0574: Undefined Security Weakness

Improper configuration in block design for IntelR MAXR 10 FPGA all versions may allow an authenticated user to potentially enable escalation of privilege and information disclosure via physical access...

CVE-2020-0546: Unquoted Search Path or Element

Unquoted service path in IntelR OptaneTM DC Persistent Memory Module Management Software before version 1.0.0.3461 may allow an authenticated user to potentially enable escalation of privilege and denial of service via local access...

CVE-2020-0507: Unquoted Search Path or Element

Unquoted service path in IntelR Graphics Drivers before versions 15.33.49.5100, 15.36.38.5117, 15.40.44.5107, 15.45.30.5103, and 26.20.100.7212 may allow an authenticated user to potentially enable denial of service via local access...