CVE-2024-37025

The CVE-2024-37025 entry affects Intel(R) Advanced Link Analyzer Standard Edition: the installer in versions prior to 23.1.1 has incorrect execution-assigned permissions that may allow an authenticated local attacker to escalate privileges. The issue is documented across multiple sources, includi...

CVE-2024-37025

Incorrect execution-assigned permissions in some IntelR Advanced Link Analyzer Standard Edition software installer before version 23.1.1 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-38660

Protection mechanism failure in the SPP for some IntelR XeonR processor family E-Core may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-38660

CVE-2024-38660 affects Intel processors with Sub-Page write Permissions (SPP). The vulnerability is a protection mechanism failure that could allow an authenticated local user to escalate privileges. The Intel advisory (INTEL-SA-01196) confirms the issue for Intel Xeon processor families (includi...

CVE-2024-38660

Protection mechanism failure in the SPP for some IntelR XeonR processor family E-Core may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-36242

Protection mechanism failure in the SPP for some IntelR Processors may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-36242

CVE-2024-36242 is an Intel Processor (SPP) vulnerability described in multiple sources as a protection mechanism failure that could allow an authenticated local user to escalate privileges. The CVE affects Intel processors through the Sub-Page write Permissions (SPP) mechanism, with CVSS v3.1 bas...

CVE-2024-38383

Uncontrolled search path for some IntelR QuartusR Prime Pro Edition software for Windows before version 24.2 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-38383

Uncontrolled search path for some IntelR QuartusR Prime Pro Edition software for Windows before version 24.2 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-38383

Intel® Quartus® Prime Pro Edition software for Windows before version 24.2 is affected by CVE-2024-38383 due to an uncontrolled search path, which may let an authenticated user escalate privileges via local access. Intel’s advisory recommends updating to version 24.2 or later to mitigate, with a ...

CVE-2024-38668

CVE-2024-38668 affects Intel® Quartus® Prime Standard Edition software for Windows prior to 23.1.1. The issue is an uncontrolled search path that may allow an authenticated user to escalate privileges via local access. Mitigation: upgrade to version 23.1.1 or later. This is supported by Intel adv...

CVE-2024-38668

Uncontrolled search path for some IntelR QuartusR Prime Standard Edition software for Windows before version 23.1.1 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-38668

Uncontrolled search path for some IntelR QuartusR Prime Standard Edition software for Windows before version 23.1.1 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-38387

Uncontrolled search path in the IntelR Graphics Driver installers for versions 15.40 and 15.45 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-38387

CVE-2024-38387 affects the Intel® Graphics Driver installers for Windows (versions 15.40 and 15.45). The root cause is an uncontrolled search path, which can let an authenticated user potentially escalate privileges via local access. Affected components are the Intel Graphics Driver installers, n...

CVE-2024-38387

Uncontrolled search path in the IntelR Graphics Driver installers for versions 15.40 and 15.45 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-21799

Path traversal for some IntelR Extension for Transformers software before version 1.5 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-21799

Path traversal for some IntelR Extension for Transformers software before version 1.5 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-21799

CVE-2024-21799 affects Intel® Extension for Transformers software prior to 1.5. The vulnerability is a path traversal that may allow an authenticated user to escalate privileges via local access. Affected component: Intel Extension for Transformers (before version 1.5). Impact is described as pot...

CVE-2024-36275

Intel Optane PMem Management software contains a NULL pointer dereference vulnerability in certain builds. Affected versions before CR_MGMT_02.00.00.4040 and CR_MGMT_03.00.00.0499 may allow an authenticated, local user to cause a denial of service. Likely impact is local availability (perCVSS met...