CVE-2025-20074

Time-of-check Time-of-use race condition for some IntelR Connectivity Performance Suite software installers before version 40.24.11210 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2025-20074

Time-of-check Time-of-use race condition for some IntelR Connectivity Performance Suite software installers before version 40.24.11210 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2025-20067

Observable timing discrepancy in firmware for some IntelR CSME and IntelR SPS may allow a privileged user to potentially enable information disclosure via local access...

CVE-2025-20067

CVE-2025-20067 describes an observable timing discrepancy in firmware for Intel® CSME and Intel® SPS that may allow a privileged local attacker to disclose information. Connected sources confirm this as a firmware-level issue affecting Intel CSME/SPS (and related components in the Intel security ...

CVE-2025-20067

Observable timing discrepancy in firmware for some IntelR CSME and IntelR SPS may allow a privileged user to potentially enable information disclosure via local access...

CVE-2025-20053

Improper buffer restrictions for some IntelR XeonR Processor firmware with SGX enabled may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2025-20053

Improper buffer restrictions for some IntelR XeonR Processor firmware with SGX enabled may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2025-20053

Improper buffer restrictions for some IntelR XeonR Processor firmware with SGX enabled may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2025-20053

Improper buffer restrictions for some IntelR XeonR Processor firmware with SGX enabled may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2025-20053

CVE-2025-20053 involves improper buffer restrictions in Intel Xeon processor firmware with SGX enabled, enabling local privilege escalation for a privileged user. Affected component is Intel Xeon processor firmware (SGX-enabled) and related microcode/microcode_ctl updates are common mitigation pa...

CVE-2025-20048

Uncontrolled search path for the IntelR Trace Analyzer and Collector software all verions may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2025-20048

CVE-2025-20048 affects Intel® Trace Analyzer and Collector software (all versions). The vulnerability is an uncontrolled search path that could allow an authenticated, low-privilege user to escalate privileges via local access. Multiple sources (Intel advisory INTEL-SA-01266 and Nessus/NVD refere...

CVE-2025-20048

Uncontrolled search path for the IntelR Trace Analyzer and Collector software all verions may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2025-20037

Time-of-check time-of-use race condition in firmware for some IntelR Converged Security and Management Engine may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2025-20025

Uncontrolled recursion for some TinyCBOR libraries maintained by IntelR before version 0.6.1 may allow an authenticated user to potentially enable denial of service via local access...

CVE-2025-20025

CVE-2025-20025 concerns the TinyCBOR library maintained by Intel. Affected are TinyCBOR builds before version 0.6.1, where uncontrolled recursion may allow an authenticated local user to cause a denial of service. Documented impact includes potential resource exhaustion and system crash; CVSS met...

CVE-2025-20025

Uncontrolled recursion for some TinyCBOR libraries maintained by IntelR before version 0.6.1 may allow an authenticated user to potentially enable denial of service via local access...

CVE-2025-20023

Incorrect default permissions for some IntelR Graphics Driver software installers may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2025-20023

Incorrect default permissions for some IntelR Graphics Driver software installers may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2025-20023

CVE-2025-20023 affects Intel Graphics Driver installers, where incorrect default permissions may allow an authenticated local user to escalate privileges. Affected products include Intel\u00a0Graphics Drivers for Arc, Iris Xe, Pro, Data Center GPU Flex, and related processors; root cause is impro...