ALPINE-CVE-2025-20109

Improper Isolation or Compartmentalization in the stream cache mechanism for some IntelR Processors may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2025-20099

Improper access control for some IntelR Rapid Storage Technology installation software may allow an authenticated user to potentially enable escalation of privilege via local access...

ALPINE-CVE-2025-20053

Improper buffer restrictions for some IntelR XeonR Processor firmware with SGX enabled may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2025-20074

Time-of-check Time-of-use race condition for some IntelR Connectivity Performance Suite software installers before version 40.24.11210 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2025-20077

Missing release of memory after effective lifetime in the UEFI OobRasMmbiHandlerDriver module for some IntelR reference server platforms may allow a privileged user to enable denial of service via local access...

CVE-2025-20023

Incorrect default permissions for some IntelR Graphics Driver software installers may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2025-20037

Time-of-check time-of-use race condition in firmware for some IntelR Converged Security and Management Engine may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2025-20025

Uncontrolled recursion for some TinyCBOR libraries maintained by IntelR before version 0.6.1 may allow an authenticated user to potentially enable denial of service via local access...

UBUNTU-CVE-2025-22889

Improper handling of overlap between protected memory ranges for some IntelR XeonR 6 processor with IntelR TDX may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2025-32086

Intel Xeon 6 Processor firmware/ microcode vulnerability CVE-2025-32086 arises from an improperly implemented security check in the DDRIO configuration when SGX/TDX are used. Connected advisories (Intel-SA-01367, Debian DSA/DSA-6030-1, Mageia MGASA-2025-0236, Amazon ALAS2-2025-3014/ALAS2023-2025-...

CVE-2025-32086

Improperly implemented security check for standard in the DDRIO configuration for some IntelR XeonR 6 Processors when using IntelR SGX or IntelR TDX may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2025-27717

Uncontrolled search path for some IntelR Graphics Driver software may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2025-27717

CVE-2025-27717: An uncontrolled search path in some Intel® Graphics Driver software may allow an authenticated user to escalate privileges via local access. The issue is detailed across multiple sources, including Intel’s advisory Intel-SA-01299, which lists affected Intel Graphics Driver compone...

CVE-2025-27576

The CVE-2025-27576 entry concerns Intel® Tiber™ Edge Platform Edge Orchestrator. Affected software: Edge Orchestrator before version 24.11.1. Issue: uncontrolled resource consumption could allow an unauthenticated/local user to cause a denial of service. Root cause details are not fully enumerate...

CVE-2025-26470

CVE-2025-26470 affects Intel Distribution for Python prior to 2025.1.0. The root cause is incorrect default permissions in the software installers, which may allow an authenticated local user to escalate privileges. Affected product: Intel Distribution for Python (Python distribution from Intel)....

CVE-2025-26404

CVE-2025-26404 concerns Intel® DSA (Driver & Support Assistant) software prior to version 25.2.15.9. The issue is an uncontrolled search path that may allow an authenticated user to escalate privileges via local access. Impact is described as privilege escalation with high secrecy/impact on confi...

CVE-2025-26403

Out-of-bounds write in the memory subsystem for some IntelR XeonR 6 processors when using IntelR SGX or IntelR TDX may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2025-25273

CVE-2025-25273 affects Intel 700 Series Ethernet Linux kernel-mode drivers prior to version 2.28.5. The root cause is insufficient control flow management in the driver, which could allow an authenticated local user to escalate privileges. Intel’s advisory recommends updating to 2.28.5 or later (...

CVE-2025-25273

Insufficient control flow management in the Linux kernel-mode driver for some IntelR 700 Series Ethernet before version 2.28.5 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2025-24923

Uncontrolled search path in some IntelR AI for Enterprise Retrieval-augmented Generation software may allow an authenticated user to potentially enable escalation of privilege via local access...