CVE-2024-38387: Uncontrolled Search Path Element

Uncontrolled search path in the IntelR Graphics Driver installers for versions 15.40 and 15.45 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-36294: Insecure Inherited Permissions

Insecure inherited permissions for some IntelR DSA software before version 24.3.26.8 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-32485: Improper Input Validation

Improper Input Validation in some IntelR VROC software before version 8.6.0.2003 may allow an authenticated user to potentially enable denial of service via local access...

CVE-2024-40885: Use After Free

Use after free in the UEFI firmware of some IntelR Server M20NTP BIOS may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2024-21799: Improper Limitation of a Pathname to a Restricted Directory

Path traversal for some IntelR Extension for Transformers software before version 1.5 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-35245: Uncontrolled Search Path Element

Uncontrolled search path element in some IntelR PROSet/Wireless WiFi software for Windows before version 23.60 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-33611: Improper Input Validation

Improper input validation for some IntelR PROSet/Wireless WiFi software for Windows before version 23.60 may allow a privileged user to potentially enable denial of service via local access...

CVE-2024-34167: Uncontrolled Search Path Element

Uncontrolled search path for the IntelR Server Board S2600ST Family BIOS and Firmware Update software all versions may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-28881: Uncontrolled Search Path Element

Uncontrolled search path for some IntelR Fortran Compiler Classic software before version 2021.13 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-39766: Improper Neutralization of Special Elements Used in a Template Engine

Improper neutralization of special elements used in SQL command in some IntelR Neural Compressor software before version v3.0 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-39609: Improper Access Control

Improper Access Control in UEFI firmware for some IntelR Server Board M70KLP may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2024-35201: Incorrect Default Permissions

Incorrect default permissions in the IntelR SDP Tool for Windows software all versions may allow an authenticated user to enable escalation of privilege via local access...

CVE-2024-21853: Improper Finite State Machines (FSMs) in Hardware Logic

Improper finite state machines FSMs in the hardware logic in some 4th and 5th Generation IntelR XeonR Processors may allow an authorized user to potentially enable denial of service via local access...

CVE-2024-31407: Uncontrolled Search Path Element

Uncontrolled search path in some IntelR High Level Synthesis Compiler software for IntelR QuartusR Prime Pro Edition Software before version 24.1 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-21783: Integer Overflow or Wraparound

Integer overflow for some IntelR VPL software before version 24.1.4 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-28049: Improper Input Validation

Improper input validation in firmware for some IntelR PROSet/Wireless Software and IntelR KillerTM Wi-Fi wireless products before version 23.40 may allow an unauthenticated user to enable denial of service via adjacent access...

CVE-2024-31074: Observable Timing Discrepancy

Observable timing discrepancy in some IntelR QAT Engine for OpenSSL software before version v1.6.1 may allow information disclosure via network access...

CVE-2024-29083: Incorrect Default Permissions

Incorrect default permissions in some IntelR Distribution for Python software before version 2024.2 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-21850: Sensitive Information in Resource Not Removed Before Reuse

Sensitive information in resource not removed before reuse in some IntelR TDX Seamldr module software before version 1.5.02.00 may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2024-29076: Uncaught Exception

Uncaught exception for some IntelR CST software before version 8.7.10803 may allow an authenticated user to potentially enable denial of service via local access...