CVE-2025-20015

Uncontrolled search path element for some IntelR Ethernet Connection software before version 29.4 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2025-20015

CVE-2025-20015 affects Intel® Ethernet Connections Boot Utility before version 29.4. The vulnerability is an uncontrolled search path element that could allow an authenticated, local user to escalate privileges. Intel’s advisory INTEL-SA-01294 describes vulnerable versions prior to 29.4 and recom...

CVE-2025-20009

The Intel advisory INTEL-SA-01269 documents CVE-2025-20009 (and related CVEs) affecting Intel Server Board D50DNP and M50FCP. It describes improper input validation in the UEFI firmware GenerationSetup module that could allow a privileged user to disclose information via local access. A remediati...

CVE-2025-20008

Insecure inherited permissions for some IntelR SimicsR Package Manager software before version 1.12.0 may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2025-20008

Insecure inherited permissions for some IntelR SimicsR Package Manager software before version 1.12.0 may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2025-20008

Intel® Simics® Package Manager before version 1.12.0 has insecure inherited permissions that may allow a privileged local user to escalate privileges. The issue is acknowledged in Intel’s advisory (Intel® Simics® Package Manager Software Advisory) and CVSS data indicate high impact for local esca...

CVE-2025-20004

CVE-2025-20004 affects Intel Xeon 6 Processor E-Cores firmware through the Alias Checking Trusted Module due to insufficient control-flow management, enabling privilege escalation from local access. Risk context is High (CVSS 3.1/4.0; local access, high privileges). Intel Intel-SA-01273 documents...

CVE-2025-20004

Insufficient control flow management in the Alias Checking Trusted Module for some IntelR XeonR 6 processor E-Cores firmware may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2025-20003

CVE-2025-20003 describes a local privilege-escalation in Intel Graphics Driver installers due to improper link resolution before file access (Link Following). Affected products include Intel® Graphics Drivers for Arc, Arc Pro, Data Center GPU Flex, and Iris Xe, plus older Core/Atom families; root...

CVE-2025-20003

Improper link resolution before file access 'Link Following' for some IntelR Graphics Driver software installers may allow an authenticated user to potentially enable escalation of privilege via local access...

Vulnerabilities fixed in Microsoft Defender

Microsoft has fixed vulnerabilities in Defender for Endpoint and Defender for Identity. A malicious party could exploit the vulnerabilities to impersonate another user and assign themselves elevated privileges, enabling execution of arbitrary code with SYSTEM privileges. For successful...

CVE-2025-29976

Improper privilege management in Microsoft Office SharePoint allows an authorized attacker to elevate privileges locally...

CVE-2025-29975

Improper link resolution before file access 'link following' in Microsoft PC Manager allows an authorized attacker to elevate privileges locally...

CVE-2025-24063

Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally...

microcode_ctl: Insufficient granularity of access control in UEFI firmware

Insufficient granularity of access control in UEFI firmware in some IntelR processors may allow a authenticated user to potentially enable denial of service via local access...

CVE-2025-4532

A vulnerability classified as critical has been found in Shanghai Bairui Information Technology SunloginClient 15.8.3.19819. This affects an unknown part in the library process.dll of the file sunloginguard.exe. The manipulation leads to uncontrolled search path. Local access is required to...

PT-2025-21049 · Intel · Intel Graphics Driver

Name of the Vulnerable Software and Affected Versions: IntelR Graphics Driver affected versions not specified Description: The issue is related to an out-of-bounds write that may allow an authenticated user to potentially enable denial of service via local access. Recommendations: At the moment,...

PT-2025-21061 · Intel · Intel Graphics Driver

Name of the Vulnerable Software and Affected Versions: IntelR Graphics Driver affected versions not specified Description: The issue concerns an uncontrolled search path in some IntelR Graphics Driver software. This could potentially allow an authenticated user to enable escalation of privilege v...

PT-2025-21105 · Intel · Intel Tiber Edge Platform Edge Orchestrator

Name of the Vulnerable Software and Affected Versions: IntelR Tiber™ Edge Platform Edge Orchestrator software affected versions not specified Description: A protection mechanism failure in the Edge Orchestrator software for IntelR Tiber™ Edge Platform may allow an authenticated user to potentiall...

PT-2025-21047 · Intel · Intel Arc Gpu

Name of the Vulnerable Software and Affected Versions: IntelR Arc™ GPU affected versions not specified Description: The issue is related to an improper conditions check that may allow an authenticated user to potentially enable denial of service via local access. Recommendations: At the moment,...