CVE-2024-36275

Intel Optane PMem Management software contains a NULL pointer dereference vulnerability in certain builds. Affected versions before CR_MGMT_02.00.00.4040 and CR_MGMT_03.00.00.0499 may allow an authenticated, local user to cause a denial of service. Likely impact is local availability (perCVSS met...

CVE-2024-36275

NULL pointer dereference in some IntelR OptaneTM PMem Management software versions before CRMGMT02.00.00.4040, CRMGMT03.00.00.0499 may allow a authenticated user to potentially enable denial of service via local access...

CVE-2024-36275

NULL pointer dereference in some IntelR OptaneTM PMem Management software versions before CRMGMT02.00.00.4040, CRMGMT03.00.00.0499 may allow a authenticated user to potentially enable denial of service via local access...

CVE-2024-36275

NULL pointer dereference in some IntelR OptaneTM PMem Management software versions before CRMGMT02.00.00.4040, CRMGMT03.00.00.0499 may allow a authenticated user to potentially enable denial of service via local access...

CVE-2024-34776

Out-of-bounds write in some IntelR SGX SDK software may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-34776

Out-of-bounds write in some IntelR SGX SDK software may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-34776

The CVE-2024-34776 entry concerns the Intel® SGX SDK for Linux (before version 2.24). Description: an out-of-bounds write could allow an authenticated local attacker to escalate privileges. The Intel advisory (INTEL-SA-01188) confirms Linux SDK updates to 2.24+ as the remediation. CVSS data shows...

CVE-2024-37027

Intel VTune Profiler before 2024.2.0 contains an improper input validation vulnerability (CVE-2024-37027) that may allow an authenticated local user to cause a denial of service. The issue is part of a broader set of vulnerabilities in the Intel oneAPI Base Toolkit and related components, with af...

CVE-2024-37027

Improper Input validation in some IntelR VTuneTM Profiler software before version 2024.2.0 may allow an authenticated user to potentially enable denial of service via local access...

CVE-2024-37027

Improper Input validation in some IntelR VTuneTM Profiler software before version 2024.2.0 may allow an authenticated user to potentially enable denial of service via local access...

CVE-2024-36245

CVE-2024-36245 affects Intel VTune Profiler before 2024.2.0 (and related Intel tooling). The root cause is an uncontrolled search path element, enabling a locally authenticated user to potentially escalate privileges (with HIGH impact on confidentiality, integrity, and availability per CVSS). The...

CVE-2024-36245

Uncontrolled search path element in some IntelR VTuneTM Profiler software before version 2024.2.0 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-36245

Uncontrolled search path element in some IntelR VTuneTM Profiler software before version 2024.2.0 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-34167

Uncontrolled search path for the IntelR Server Board S2600ST Family BIOS and Firmware Update software all versions may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-34167

CVE-2024-34167 describes an uncontrolled search path vulnerability in the Intel Server Board S2600ST Family BIOS and Firmware Update software (all versions). Connected sources corroborate a local-privilege-escalation issue when an authenticated user gains local access, caused by improper handling...

CVE-2024-34167

Uncontrolled search path for the IntelR Server Board S2600ST Family BIOS and Firmware Update software all versions may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-36282

Improper input validation in the IntelR Server Board S2600ST Family BIOS and Firmware Update software all versions may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2024-36282

Improper input validation in the IntelR Server Board S2600ST Family BIOS and Firmware Update software all versions may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2024-36282

CVE-2024-36282 concerns Intel® Server Board S2600ST Family BIOS and Firmware Update software. The vulnerability arises from improper input validation in the update software, allowing a privileged user to potentially escalate privileges via local access. Affected: BIOS and Firmware Update software...

CVE-2024-36482

CVE-2024-36482 : Improper input validation in some Intel® CIP software before version 2.4.10852 may allow a privileged user to escalate privileges via local access. Intel’s advisory (Intel® CIP Software) confirms affected product: Intel® CIP software prior to 2.4.10852. Base/impact metrics from m...