CVE-2025-20026

Out-of-bounds read for some IntelR PROSet/Wireless WiFi Software for Windows before version 23.100 may allow an unauthenticated user to potentially enable denial of service via adjacent access...

CVE-2025-20026

Out-of-bounds read for some IntelR PROSet/Wireless WiFi Software for Windows before version 23.100 may allow an unauthenticated user to potentially enable denial of service via adjacent access...

CVE-2025-20026

CVE-2025-20026 relates to an out-of-bounds read in Intel® PROSet/Wireless WiFi Software for Windows prior to version 23.100. The root cause is an out-of-bounds read that could allow an unauthenticated user to cause a denial of service via adjacent access. Documented affected products include vari...

CVE-2025-20022

CVE-2025-20022 affects Intel® Tiber™ Edge Platform Edge Orchestrator (Edge Orchestrator software before 24.11). Root cause: insufficient control flow management in the affected component, enabling a privileged user to potentially disclose information via adjacent access. Impact (as per sources): ...

CVE-2025-20018

Untrusted pointer dereference for some IntelR Graphics Drivers may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2025-20018

Untrusted pointer dereference for some IntelR Graphics Drivers may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2025-20018

CVE-2025-20018 corresponds to an elevation of privilege vulnerability in Intel Graphics Drivers caused by an untrusted pointer dereference. Affected products include Intel® Arc™, Iris Xe, and related drivers across Arc Pro, Data Center GPU Flex, and newer CPU generations. The impact is local esca...

CVE-2025-20015

Uncontrolled search path element for some IntelR Ethernet Connection software before version 29.4 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2025-20015

Uncontrolled search path element for some IntelR Ethernet Connection software before version 29.4 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2025-20015

CVE-2025-20015 affects Intel® Ethernet Connections Boot Utility before version 29.4. The vulnerability is an uncontrolled search path element that could allow an authenticated, local user to escalate privileges. Intel’s advisory INTEL-SA-01294 describes vulnerable versions prior to 29.4 and recom...

CVE-2025-20013

Exposure of sensitive information to an unauthorized actor for some Edge Orchestrator software for IntelR Tiber™ Edge Platform may allow an authenticated user to potentially enable information disclosure via local access...

CVE-2025-20013

CVE-2025-20013 affects Edge Orchestrator software for Intel® Tiber™ Edge Platform (prior to 24.11). It enables information disclosure via local access to an authenticated user (exposure of sensitive data). Intel’s advisory INTEL-SA-01239 notes escalation/DoS/info-disclosure potential and advises ...

CVE-2025-20013

Exposure of sensitive information to an unauthorized actor for some Edge Orchestrator software for IntelR Tiber™ Edge Platform may allow an authenticated user to potentially enable information disclosure via local access...

CVE-2025-20012

CVE-2025-20012 affects certain Intel Core Ultra processors and is due to an incorrect behavior order that could allow an unauthenticated user to disclose information with physical access. The connected advisories confirm this is addressed via an Intel microcode update (e.g., intel-microcode) and ...

CVE-2025-20012

Incorrect behavior order for some IntelR Core™ Ultra Processors may allow an unauthenticated user to potentially enable information disclosure via physical access...

CVE-2025-20012

Incorrect behavior order for some IntelR Core™ Ultra Processors may allow an unauthenticated user to potentially enable information disclosure via physical access...

CVE-2025-20012

Incorrect behavior order for some IntelR Core™ Ultra Processors may allow an unauthenticated user to potentially enable information disclosure via physical access...

CVE-2025-20012

Incorrect behavior order for some IntelR Core™ Ultra Processors may allow an unauthenticated user to potentially enable information disclosure via physical access...

CVE-2025-20009

Improper input validation in the UEFI firmware GenerationSetup module for the IntelR Server D50DNP and M50FCP boards may allow a privileged user to potentially enable information disclosure via local access...

CVE-2025-20009

Improper input validation in the UEFI firmware GenerationSetup module for the IntelR Server D50DNP and M50FCP boards may allow a privileged user to potentially enable information disclosure via local access...