PT-2024-19080 · Intel · Intel Processor Diagnostic Tool

Name of the Vulnerable Software and Affected Versions: IntelR Processor Diagnostic Tool versions prior to 4.1.9.41 Description: The issue is related to an uncontrolled search path in the IntelR Processor Diagnostic Tool software. This may allow an authenticated user to potentially enable escalati...

Intel BIOS Guard firmware 安全漏洞

Intel Bios is a basic input-output system used by Intel Corporation USA to perform hardware initialization during the power-on boot phase, as well as firmware that provides runtime services to the operating system. A security vulnerability exists in the Intel BIOS Guard firmware that stems from t...

PT-2024-13239 · Intel · Intel Vtune Profiler

Name of the Vulnerable Software and Affected Versions: IntelR VTuneTM Profiler versions prior to 2024.0 Description: The issue is related to an uncontrolled search path element in IntelR VTuneTM Profiler software. This may allow an authenticated user to potentially enable escalation of privilege...

Intel Graphics Performance Analyzers 安全漏洞

Intel Graphics Performance Analyzers Intel GPA is a graphics performance analyzer from Intel Corporation USA. A security vulnerability previously existed in Intel Graphics Performance Analyzers version 2023.3, which stemmed from an improper access control issue. It could allow an authenticated us...

PT-2024-19377 · Intel · Intel Server D50Dnp Family

Name of the Vulnerable Software and Affected Versions: IntelR Server D50DNP Family products affected versions not specified Description: The issue is related to improper input validation in the PprRequestLog module in UEFI firmware, which may allow a privileged user to enable escalation of...

Intel Quartus Prime 安全漏洞

Intel Quartus Prime is a programmable logic device tool for the design and development of Fpga from Intel Corporation. A security vulnerability exists in Intel Quartus Prime prior to version 23.4 that stems from an uncontrolled search path issue. It could allow an authenticated user to escalate...

PT-2024-13290 · Intel · Intel Wireless Bluetooth

Name of the Vulnerable Software and Affected Versions: IntelR Wireless BluetoothR products for Windows versions prior to 23.20 Description: The issue is related to an improper conditions check that may allow a privileged user to potentially enable denial of service via local access...

Intel Power Gadget 安全漏洞

Intel Power Gadget is a software-based power consumption monitoring tool for Intel Core processors from Intel Corporation USA. A security vulnerability exists in Intel Power Gadget that stems from a post-release reuse issue. It could allow an authenticated user to escalate privileges via local...

PT-2024-19895 · Intel · Intel Server D50Dnp Family

Name of the Vulnerable Software and Affected Versions: IntelR Server D50DNP Family products affected versions not specified Description: The issue is related to improper input validation in the UserAuthenticationSmm driver in UEFI firmware, which may allow a privileged user to enable escalation o...

Intel Wireless Bluetooth 安全漏洞

Intel Wireless Bluetooth is a driver tool from Intel USA that can effectively solve some problems with intel bluetooth in win10 system. A security vulnerability exists prior to Intel Wireless Bluetooth version 23.20, which stems from the presence of an improper condition checking issue. It could...

Intel Server Products 安全漏洞

Intel Server Products is a family of products from Intel Corporation USA. A security vulnerability exists in the Intel Server D50DNP PlatformVariableInitDxe driver, which originates from an incorrect input validation issue. It could allow a privileged user to achieve privilege escalation via loca...

PT-2024-12158 · Intel · Intel Bios Guard Firmware

Name of the Vulnerable Software and Affected Versions: IntelR BIOS Guard firmware affected versions not specified Description: The issue is related to improper input validation in the IntelR BIOS Guard firmware, which may allow a privileged user to potentially enable escalation of privilege via...

Intel Server Board 安全漏洞

Intel Server Board is a server motherboard from Intel Corporation USA. A security vulnerability exists in Intel Server Board S2600BP, which stems from an incorrect input validation issue with the EpsdSrMgmtConfig parameter. It could allow a privileged user to conduct a denial of service attack vi...

Intel Extreme Tuning Utility < 7.14.0.15 Insecure Permission Vulnerability (intel-sa-01066)

The version of Intel Extreme Tuning Utility installed on the remote host is prior to 7.14.0.15. It is, therefore, affected by an insecure permission vulnerability as referenced in the intel-sa-01066 advisory. - Insecure inherited permissions in some Intel® XTU software before version 7.14.0.15 m...

CVE-2024-27244

Insufficient verification of data authenticity in the installer for Zoom Workplace VDI App for Windows may allow an authenticated user to conduct an escalation of privilege via local access...

CVE-2024-27244 Zoom Workplace VDI App for Windows - Insufficient Verification of Data Authenticity

Insufficient verification of data authenticity in the installer for Zoom Workplace VDI App for Windows may allow an authenticated user to conduct an escalation of privilege via local access...

CVE-2024-27244

Summary (CVE-2024-27244) Zoom Workplace VDI App for Windows contains an issue where the installer performs insufficient validation of data authenticity, enabling an authenticated user to escalate privileges via local access. Documented impact is elevation of privilege with local access; no exploi...

CVE-2024-20394

A vulnerability in Cisco AppDynamics Network Visibility Agent could allow an unauthenticated, local attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due to the inability to handle unexpected input. An attacker who has local device access could explo...

Vulnerabilities fixed in Microsoft Windows

Microsoft has fixed vulnerabilities in Windows. A malicious party can exploit the vulnerabilities to launch attacks execute attacks that can lead to the following categories of damage: Denial-of-Service DoS. Circumvention of security measure Remote code execution Administrator/Root rights Remote...

PT-2024-14844 · Arc · Arc

Name of the Vulnerable Software and Affected Versions: Arc affected versions not specified Description: The local web interface provided during the configuration of Arc lacks authentication, making it vulnerable to abuse by local attackers or malware. This could allow a malicious local user or...