CVE-2024-24981

The CVE-2024-24981 issue affects Intel Server M50FCP Family UEFI firmware, specifically the PfrSmiUpdateFw driver, where improper input validation may enable privilege escalation via local access. Reported by multiple sources (NVD/Red Hat/CVE listings) with a CVSS v3.1 base score of 7.5 (High), l...

CVE-2024-22382

Improper input validation in PprRequestLog module in UEFI firmware for some IntelR Server D50DNP Family products may allow a privileged user to enable escalation of privilege via local access...

CVE-2024-22382

CVE-2024-22382 affects Intel® Server D50DNP Family UEFI firmware (PprRequestLog module). The issue is improper input validation that may allow a locally privileged user to escalate privileges. Impact is described as local privilege escalation with high impact (CVSSv3.1: AV:L/AC:H/PR:H/UI:N/S:C/C:...

CVE-2024-23487

Improper input validation in UserAuthenticationSmm driver in UEFI firmware for some IntelR Server D50DNP Family products may allow a privileged user to enable escalation of privilege via local access...

CVE-2024-21823

Hardware logic with insecure de-synchronization in IntelR DSA and IntelR IAA for some IntelR 4th or 5th generation XeonR processors may allow an authorized user to potentially enable escalation of privilege local access...

CVE-2024-21823

Hardware logic with insecure de-synchronization in IntelR DSA and IntelR IAA for some IntelR 4th or 5th generation XeonR processors may allow an authorized user to potentially enable escalation of privilege local access...

CVE-2024-21823

CVE-2024-21823 affects Intel DSA/IAA on some 4th/5th generation Xeon processors. The issue is described as hardware logic with insecure de-synchronization, enabling a local, authenticated user to potentially escalate privileges. Connected documents corroborate a local-exploit scenario and mention...

CVE-2024-21792

Time-of-check Time-of-use race condition in IntelR Neural Compressor software before version 2.5.0 may allow an authenticated user to potentially enable information disclosure via local access...

CVE-2024-21792

Time-of-check Time-of-use race condition in IntelR Neural Compressor software before version 2.5.0 may allow an authenticated user to potentially enable information disclosure via local access...

Denial Of Service (DOS)

IntelR CoreTM Ultra Processors are vulnerable to Denial Of Service DOS. The vulnerability is caused due to a Sequence of processor instructions leading to unexpected behavior. This can allow an authenticated user to potentially enable Denial Of Service DOS via local access...

K000139652: Intel CPU vulnerability CVE-2023-23583

Security Advisory Description Sequence of processor instructions leads to unexpected behavior for some IntelR Processors may allow an authenticated user to potentially enable escalation of privilege and/or information disclosure and/or denial of service via local access. CVE-2023-23583 Impact Thi...

CVE-2024-1417 Local Code Injection Vulnerability in AuthPoint Password Manager App for macOS Safari

Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability in WatchGuard AuthPoint Password Manager on MacOS allows an a adversary with local access to execute code under the context of the AuthPoint Password Manager application. This issue affects AuthPoint...

CVE-2024-1417

WatchGuard (WatchGuard) AuthPoint Password Manager for macOS is affected by CVE-2024-1417, a local Command Injection vulnerability caused by improper neutralization of special elements. The issue allows a user with local access to execute code within the AuthPoint Password Manager application, af...

CVE-2024-1417 Local Code Injection Vulnerability in AuthPoint Password Manager App for macOS Safari

Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability in WatchGuard AuthPoint Password Manager on MacOS allows an a adversary with local access to execute code under the context of the AuthPoint Password Manager application. This issue affects AuthPoint...

K000139654: Intel oneAPI vulnerabilities CVE-2023-24592 and CVE-2023-27383

Security Advisory Description CVE-2023-24592 Path traversal in the some IntelR oneAPI Toolkits and Component software before version 2023.1 may allow authenticated user to potentially enable escalation of privilege via local access. CVE-2023-27383 Protection mechanism failure in some IntelR oneAP...

K000139653: Intel(R) QAT Library vulnerability CVE-2023-22313

Security Advisory Description Improper buffer restrictions in some IntelR QAT Library software before version 22.07.1 may allow a privileged user to potentially enable information disclosure via local access. CVE-2023-22313 Impact There is no impact; F5 products are not affected by this...

Intel Media SDK 安全漏洞

Intel Media SDK is a multimedia SDK Software Development Kit from Intel Corporation USA. The product is primarily used for video encoding, decoding and processing in Windows and embedded Linux applications. A security vulnerability exists in Intel Media SDK that stems from the presence of incorre...

PT-2024-19067 · Intel · Intel Quartus Prime Lite Edition

Name of the Vulnerable Software and Affected Versions: IntelR QuartusR Prime Lite Edition Design software versions prior to 23.1 Description: The issue is related to an improper conditions check in the software, which may allow an authenticated user to potentially enable escalation of privilege v...

PT-2024-12810 · Intel · Intel(R) Cst

Name of the Vulnerable Software and Affected Versions: IntelR CST software versions prior to 2.1.10300 Description: The issue is related to improper access control in IntelR CST software, which may allow an authenticated user to potentially enable escalation of privilege via local access...

PT-2024-12838

Name of the Vulnerable Software and Affected Versions: IntelR Power Gadget software for macOS affected versions not specified Description: The issue is related to improper access control in IntelR Power Gadget software for macOS, which may allow an authenticated user to potentially enable...