CVE-2025-20008

Insecure inherited permissions for some IntelR SimicsR Package Manager software before version 1.12.0 may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2025-20008

Insecure inherited permissions for some IntelR SimicsR Package Manager software before version 1.12.0 may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2025-20008

Intel® Simics® Package Manager before version 1.12.0 has insecure inherited permissions that may allow a privileged local user to escalate privileges. The issue is acknowledged in Intel’s advisory (Intel® Simics® Package Manager Software Advisory) and CVSS data indicate high impact for local esca...

CVE-2025-20004

CVE-2025-20004 affects Intel Xeon 6 Processor E-Cores firmware through the Alias Checking Trusted Module due to insufficient control-flow management, enabling privilege escalation from local access. Risk context is High (CVSS 3.1/4.0; local access, high privileges). Intel Intel-SA-01273 documents...

CVE-2025-20004

Insufficient control flow management in the Alias Checking Trusted Module for some IntelR XeonR 6 processor E-Cores firmware may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2025-20003

CVE-2025-20003 describes a local privilege-escalation in Intel Graphics Driver installers due to improper link resolution before file access (Link Following). Affected products include Intel® Graphics Drivers for Arc, Arc Pro, Data Center GPU Flex, and Iris Xe, plus older Core/Atom families; root...

CVE-2025-20003

Improper link resolution before file access 'Link Following' for some IntelR Graphics Driver software installers may allow an authenticated user to potentially enable escalation of privilege via local access...

Vulnerabilities fixed in Microsoft Defender

Microsoft has fixed vulnerabilities in Defender for Endpoint and Defender for Identity. A malicious party could exploit the vulnerabilities to impersonate another user and assign themselves elevated privileges, enabling execution of arbitrary code with SYSTEM privileges. For successful...

CVE-2025-29976

Improper privilege management in Microsoft Office SharePoint allows an authorized attacker to elevate privileges locally...

CVE-2025-29975

Improper link resolution before file access 'link following' in Microsoft PC Manager allows an authorized attacker to elevate privileges locally...

CVE-2025-24063

Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally...

microcode_ctl: Insufficient granularity of access control in UEFI firmware

Insufficient granularity of access control in UEFI firmware in some IntelR processors may allow a authenticated user to potentially enable denial of service via local access...

CVE-2025-4532

A vulnerability classified as critical has been found in Shanghai Bairui Information Technology SunloginClient 15.8.3.19819. This affects an unknown part in the library process.dll of the file sunloginguard.exe. The manipulation leads to uncontrolled search path. Local access is required to...

PT-2025-21059 · Unknown · Endurance Gaming Mode

Name of the Vulnerable Software and Affected Versions: Endurance Gaming Mode affected versions not specified Description: The issue concerns incorrect default permissions for some Endurance Gaming Mode software installers. This may allow an authenticated user to potentially enable escalation of...

PT-2025-21105 · Intel · Intel Tiber Edge Platform Edge Orchestrator

Name of the Vulnerable Software and Affected Versions: IntelR Tiber™ Edge Platform Edge Orchestrator software affected versions not specified Description: A protection mechanism failure in the Edge Orchestrator software for IntelR Tiber™ Edge Platform may allow an authenticated user to potentiall...

PT-2025-21061 · Intel · Intel Graphics Driver

Name of the Vulnerable Software and Affected Versions: IntelR Graphics Driver affected versions not specified Description: The issue concerns an uncontrolled search path in some IntelR Graphics Driver software. This could potentially allow an authenticated user to enable escalation of privilege v...

PT-2025-21062 · Intel · Intel Xeon 6

Name of the Vulnerable Software and Affected Versions: IntelR XeonR 6 processor with E-cores affected versions not specified Description: The issue is related to the improper restriction of software interfaces to hardware features for some IntelR XeonR 6 processor with E-cores when using IntelR...

PT-2025-21090 · Intel · Intel Slim Bootloader

Name of the Vulnerable Software and Affected Versions: IntelR Slim Bootloader affected versions not specified Description: The issue is related to improper authentication in the firmware, which may allow a privileged user to potentially enable escalation of privilege via local access...

PT-2025-21049 · Intel · Intel Graphics Driver

Name of the Vulnerable Software and Affected Versions: IntelR Graphics Driver affected versions not specified Description: The issue is related to an out-of-bounds write that may allow an authenticated user to potentially enable denial of service via local access. Recommendations: At the moment,...

PT-2025-21047 · Intel · Intel Arc Gpu

Name of the Vulnerable Software and Affected Versions: IntelR Arc™ GPU affected versions not specified Description: The issue is related to an improper conditions check that may allow an authenticated user to potentially enable denial of service via local access. Recommendations: At the moment,...