CVE-2024-36482

Improper input validation in some IntelR CIP software before version 2.4.10852 may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2024-36276

Insecure inherited permissions for some IntelR CIP software before version 2.4.10852 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-36276

Insecure inherited permissions for some IntelR CIP software before version 2.4.10852 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-36276

CVE-2024-36276 affects Intel® CIP software before version 2.4.10852. The root cause is insecure inherited permissions, which may allow an authenticated user to escalate privileges via local access. Affected product: Intel® CIP software. Impact per document: local privilege escalation with high co...

CVE-2024-36253

CVE-2024-36253 affects Intel® SDP Tool for Windows, with an issue described as uncontrolled search path, potentially enabling privilege escalation for an authenticated user with local access. The entry covers all versions of the Intel SDP Tool for Windows. Multiple sources corroborate the vulnera...

CVE-2024-36253

Uncontrolled search path in the IntelR SDP Tool for Windows software all version may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-36253

Uncontrolled search path in the IntelR SDP Tool for Windows software all version may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-35201

Intel SDP Tool for Windows (all versions) is affected by CVE-2024-35201, caused by incorrect default permissions that may allow an authenticated local user to escalate privileges. The Intel advisory (Intel SA-01179) notes a product discontinuation and that no updates will be released; Intel recom...

CVE-2024-35201

Incorrect default permissions in the IntelR SDP Tool for Windows software all versions may allow an authenticated user to enable escalation of privilege via local access...

CVE-2024-35201

Incorrect default permissions in the IntelR SDP Tool for Windows software all versions may allow an authenticated user to enable escalation of privilege via local access...

CVE-2024-31074

Observable timing discrepancy in some IntelR QAT Engine for OpenSSL software before version v1.6.1 may allow information disclosure via network access...

CVE-2024-31074

The CVE affects Intel QAT Engine for OpenSSL. Observable timing discrepancy may disclose information via network access in some Intel QAT Engine for OpenSSL before v1.6.1. Connected advisories indicate fixes are included in QAT Engine 1.7.0, with 1.6.1 release of that line addressing this issue. ...

CVE-2024-31074

Observable timing discrepancy in some IntelR QAT Engine for OpenSSL software before version v1.6.1 may allow information disclosure via network access...

CVE-2024-28885

Observable discrepancy in some IntelR QAT Engine for OpenSSL software before version v1.6.1 may allow information disclosure via network access...

CVE-2024-28885

CVE-2024-28885 (with CVE-2024-31074 and CVE-2024-33617) concerns observable/disclosure risks in Intel(R) QAT Engine for OpenSSL. The vulnerabilities affect Intel QAT Engine for OpenSSL software before version v1.6.1; exploitation is network-accessible. SUSE advisories reference fixes in the 1.7.0...

CVE-2024-28885

Observable discrepancy in some IntelR QAT Engine for OpenSSL software before version v1.6.1 may allow information disclosure via network access...

CVE-2024-33617

Insufficient control flow management in some IntelR QAT Engine for OpenSSL software before version v1.6.1 may allow information disclosure via network access...

CVE-2024-33617

Insufficient control flow management in some IntelR QAT Engine for OpenSSL software before version v1.6.1 may allow information disclosure via network access...

CVE-2024-33617

CVE-2024-33617 is associated with Intel(R) QAT Engine for OpenSSL. The attached advisories/plugins confirm the vulnerability as: insufficient control flow management in the QAT Engine before version v1.6.1 may allow information disclosure via network access. Affected components in SUSE advisories...

CVE-2024-37024

Uncontrolled search path for some ACAT software maintained by IntelR for Windows before version 3.11.0 may allow an authenticated user to potentially enable escalation of privilege via local access...