CVE-2025-20087

CVE-2025-20087 is an Intel advisory issue describing improper default permissions on some Intel® oneAPI DPC++/C++ Compiler installers that could let an authenticated local user escalate privileges. Affected: Intel oneAPI DPC++/C++ Compiler installers (and related tooling) with the vulnerability d...

CVE-2025-20077

Missing release of memory after effective lifetime in the UEFI OobRasMmbiHandlerDriver module for some IntelR reference server platforms may allow a privileged user to enable denial of service via local access...

CVE-2025-20077

Missing release of memory after effective lifetime in the UEFI OobRasMmbiHandlerDriver module for some IntelR reference server platforms may allow a privileged user to enable denial of service via local access...

CVE-2025-20067

Observable timing discrepancy in firmware for some IntelR CSME and IntelR SPS may allow a privileged user to potentially enable information disclosure via local access...

CVE-2025-20053

Improper buffer restrictions for some IntelR XeonR Processor firmware with SGX enabled may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2025-20053

Improper buffer restrictions for some IntelR XeonR Processor firmware with SGX enabled may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2025-20053

Improper buffer restrictions for some IntelR XeonR Processor firmware with SGX enabled may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2025-20048

Uncontrolled search path for the IntelR Trace Analyzer and Collector software all verions may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2025-20048

Uncontrolled search path for the IntelR Trace Analyzer and Collector software all verions may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2025-20048

CVE-2025-20048 affects Intel® Trace Analyzer and Collector software (all versions). The vulnerability is an uncontrolled search path that could allow an authenticated, low-privilege user to escalate privileges via local access. Multiple sources (Intel advisory INTEL-SA-01266 and Nessus/NVD refere...

CVE-2025-20037

Intel’s advisory (INTEL-SA-01280) confirms CVE-2025-20037 as a TOCTOU race condition in firmware affecting CSME, SPS, AMT, and related Intel firmware. The flaw permits a local, privileged escalation (attack vector: local, requires high privileges; UI: none) with high impact on integrity and avail...

CVE-2025-20037

Time-of-check time-of-use race condition in firmware for some IntelR Converged Security and Management Engine may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2025-20025

Uncontrolled recursion for some TinyCBOR libraries maintained by IntelR before version 0.6.1 may allow an authenticated user to potentially enable denial of service via local access...

CVE-2025-20023

Incorrect default permissions for some IntelR Graphics Driver software installers may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2025-20017

Uncontrolled search path for some IntelR oneAPI Toolkit and component software installers may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2025-20017

Uncontrolled search path for some IntelR oneAPI Toolkit and component software installers may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2025-22834

AMI APTIOV contains a vulnerability in BIOS where a user may cause “Improper Initialization” by local accessing. Successful exploitation of this vulnerability may leave the resource in an unexpected state and potentially impact confidentiality, integrity, and availability...

CVE-2025-22834

AMI APTIOV contains a vulnerability in BIOS where a user may cause “Improper Initialization” by local accessing. Successful exploitation of this vulnerability may leave the resource in an unexpected state and potentially impact confidentiality, integrity, and availability...

CVE-2025-22830

APTIOV contains a vulnerability in BIOS where a skilled user may cause “Race Condition” by local access. A successful exploitation of this vulnerability may lead to resource exhaustion and impact Confidentiality, Integrity, and Availability...

CVE-2025-22830

APTIOV contains a vulnerability in BIOS where a skilled user may cause “Race Condition” by local access. A successful exploitation of this vulnerability may lead to resource exhaustion and impact Confidentiality, Integrity, and Availability...