CVE-2024-22379

CVE-2024-22379 affects Intel® Inspector software (and HPC Toolkit) prior to version 2024.0, due to an uncontrolled search path that could let an authenticated local user escalate privileges. Impact is local and requires user interaction; CVSS base metrics indicate a Medium severity with high impa...

CVE-2024-21788

Uncontrolled search path in some IntelR GPA software before version 2023.4 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2023-22662: Improper Input Validation

Improper input validation of EpsdSrMgmtConfig in UEFI firmware for some IntelR Server Board S2600BP products may allow a privileged user to potentially enable denial of service via local access...

CVE-2023-45736: Insecure Inherited Permissions

Insecure inherited permissions in IntelR Power Gadget software for Windows all versions may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2023-48727: Use of NullPointerException Catch to Detect NULL Pointer Dereference

NULL pointer dereference in some IntelR oneVPL software before version 23.3.5 may allow an authenticated user to potentially enable information disclosure via local access...

CVE-2023-45745: Improper Input Validation

Improper input validation in some IntelR TDX module software before version 1.5.05.46.698 may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2023-45221: Improper Restriction of Operations within the Bounds of a Memory Buffer

Improper buffer restrictions in IntelR Media SDK all versions may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2023-38581: Buffer Copy without Checking Size of Input

Buffer overflow in IntelR Power Gadget software for Windows all versions may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2023-38417: Improper Input Validation

Improper input validation for some IntelR PROSet/Wireless WiFi software before version 23.20 may allow an unauthenticated user to potentially enable denial of service via adjacent access...

CVE-2021-33142: Improper Input Validation

Improper input validation in some IntelR Ethernet Adapters and IntelR Ethernet Controller I225 Manageability firmware may allow a privileged user to potentially enable denial of service via local access...

CVE-2024-24981: Improper Input Validation

Improper input validation in PfrSmiUpdateFw driver in UEFI firmware for some IntelR Server M50FCP Family products may allow a privileged user to enable escalation of privilege via local access...

CVE-2024-23980: Improper Restriction of Operations within the Bounds of a Memory Buffer

Improper buffer restrictions in PlatformPfrDxe driver in UEFI firmware for some IntelR Server D50FCP Family products may allow a privileged user to enable escalation of privilege via local access...

CVE-2023-41092: Unchecked Return Value

Unchecked return value in SDM firmware for IntelR Stratix 10 and IntelR Agilex 7 FPGAs before version 23.3 may allow an authenticated user to potentially enable denial of service via adjacent access...

CVE-2021-33158: Improper Neutralization of Invalid Characters in Identifiers in Web Pages

Improper neutralization in some IntelR Ethernet Adapters and IntelR Ethernet Controller I225 Manageability firmware may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2023-41961: Uncontrolled Search Path Element

Uncontrolled search path in some IntelR GPA software before version 2023.3 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-37410: Improper Access Control

Improper access control for some IntelR Thunderbolt driver software before version 89 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2023-45733: Hardware Logic Contains Race Conditions

Hardware logic contains race conditions in some IntelR Processors may allow an authenticated user to potentially enable partial information disclosure via local access...

CVE-2024-21809: DEPRECATED: Improper Sanitization of Custom Special Characters

Improper conditions check for some IntelR QuartusR Prime Lite Edition Design software before version 23.1 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2023-40155: Uncontrolled Search Path Element

Uncontrolled search path for some IntelR CST software before version 2.1.10300 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2023-41082: Use of NullPointerException Catch to Detect NULL Pointer Dereference

Null pointer dereference for some IntelR CST software before version 2.1.10300 may allow an authenticated user to potentially enable denial of service via local access...