Intel oneAPI Base Toolkit < 2025.1.0 Multiple Vulnerabilities

Multiple vulnerabilities exist in Intel oneAPI Base Toolkit versions prior to 2025.1.0. See vendor advisory for more details. - Uncontrolled search path for the Instrumentation and Tracing Technology API ITT API software before version 3.25.4 within Ring 3: User Applications may allow an escalati...

Malicious code in intel-ai-assistant-ui (npm)

The package intel-ai-assistant-ui was found to contain malicious code. --- -= Per source details. Do not edit below this line.=-...

CVE-2025-27707

Exposure of sensitive information to an unauthorized actor for some Edge Orchestrator software before version 24.11.1 for IntelR TiberTM Edge Platform may allow an authenticated user to potentially enable denial of service via adjacent access...

CVE-2025-32004

Improper input validation in the Intel Edger8r Tool for some IntelR SGX SDK may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2025-27576

Uncontrolled resource consumption for some Edge Orchestrator software before version 24.11.1 for IntelR TiberTM Edge Platform may allow an unauthenticated user to potentially enable denial of service via local access...

CVE-2025-24324

Integer overflow or wraparound in the Linux kernel-mode driver for some IntelR 800 Series Ethernet before version 1.17.2 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2025-20613

Predictable Seed in Pseudo-Random Number Generator PRNG in the firmware for some IntelR TDX may allow an authenticated user to potentially enable information disclosure via local access...

CVE-2025-21086

Improper input validation in the Linux kernel-mode driver for some IntelR 700 Series Ethernet before version 2.28.5 may allow an authenticated user to potentially enable escalation of privilege...

CVE-2025-32086

Improperly implemented security check for standard in the DDRIO configuration for some IntelR XeonR 6 Processors when using IntelR SGX or IntelR TDX may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2025-21093

Uncontrolled search path element for some IntelR Driver & Support Assistant Tool software before version 24.6.49.8 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2025-24840

Improper access control for some Edge Orchestrator software before version 24.11.1 for IntelR TiberTM Edge Platform may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access...

CVE-2025-22853

Improper synchronization in the firmware for some IntelR TDX may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2025-21090

Missing reference to active allocated resource for some IntelR XeonR processors may allow an authenticated user to potentially enable denial of service via local access...

CVE-2025-24511

Improper initialization in the Linux kernel-mode driver for some IntelR I350 Series Ethernet before version 5.19.2 may allow an authenticated user to potentially enable Information disclosure via data exposure...

CVE-2025-21096

Improper buffer restrictions in the firmware for some IntelR TDX may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2025-27250

Uncontrolled resource consumption for some Edge Orchestrator software before version 24.11.1 for IntelR TiberTM Edge Platform may allow an authenticated user to potentially enable denial of service via adjacent access...

CVE-2025-27537

Improper input validation for some Edge Orchestrator software before version 24.11.1 for IntelR TiberTM Edge Platform may allow an authenticated user to potentially enable escalation of privilege via adjacent access...

CVE-2025-24515

NULL pointer dereference for some IntelR Graphics Drivers may allow an authenticated user to potentially enable denial of service via local access...

CVE-2025-24923

Uncontrolled search path in some IntelR AI for Enterprise Retrieval-augmented Generation software may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2025-24523

Protection mechanism failure for some Edge Orchestrator software before version 24.11.1 for IntelR TiberTM Edge Platform may allow an authenticated user to potentially enable denial of service via adjacent access...