CVE-2024-24582

Improper input validation in XmlCli feature for UEFI firmware for some IntelR processors may allow privileged user to potentially enable escalation of privilege via local access...

CVE-2024-24582

Improper input validation in XmlCli feature for UEFI firmware for some IntelR processors may allow privileged user to potentially enable escalation of privilege via local access...

CVE-2023-34440

Improper input validation in UEFI firmware for some IntelR Processors may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2023-34440

Improper input validation in UEFI firmware for some IntelR Processors may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2023-43758

CVE-2023-43758 involves improper input validation in UEFI firmware for certain Intel processors, enabling local privilege escalation. Connected sources confirm affected component is Intel microcode/UEFI handling and provide remediation details: Debian ETL advisory DLA-4095-1 lists intel-microcode...

CVE-2023-43758

Improper input validation in UEFI firmware for some IntelR processors may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2024-26021

Improper initialization in the firmware for some IntelR AMT and IntelR Standard Manageability may allow a privileged user to potentially enable information disclosure via local access...

CVE-2024-26021

Improper initialization in the firmware for some IntelR AMT and IntelR Standard Manageability may allow a privileged user to potentially enable information disclosure via local access...

CVE-2024-30211

CVE-2024-30211 describes an improper access control vulnerability in some Intel® ME driver pack installer engines prior to 2422.6.2.0, potentially allowing an authenticated user to escalate privileges via local access. The Intel advisory INTEL-SA-01152 and related Red Hat/Support documents confir...

CVE-2024-30211

Improper access control in some IntelR ME driver pack installer engines before version 2422.6.2.0 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-21859

Improper buffer restrictions in the UEFI firmware for some IntelR Processors may allow a privileged user to potentially enable information disclosure via local access...

CVE-2024-31155

CVE-2024-31155 concerns improper buffer restrictions in the UEFI firmware of some Intel processors, enabling potential local escalation of privilege by a privileged user. The vulnerability is documented with CVSS scores (3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H; 4.0/AV:L/AC:H/AT:P/PR:H/UI:N/VC:H/V...

CVE-2024-31155

Improper buffer restrictions in the UEFI firmware for some IntelR Processors may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2024-39779

Stack-based buffer overflow in some drivers for IntelR Ethernet Connection I219 Series before version 12.19.1.39 may allow an authenticated user to potentially enable denial of service via local access...

CVE-2024-39779

Stack-based buffer overflow in some drivers for IntelR Ethernet Connection I219 Series before version 12.19.1.39 may allow an authenticated user to potentially enable denial of service via local access...

CVE-2024-24852

CVE-2024-24852 affects Intel’s Ethernet Adapter Complete Driver Pack , where versions prior to 29.1 expose an Uncontrolled search path vulnerability. This could allow an authenticated local user to escalate privileges. Documented impact aligns with CVSS v3.1: LOCAL access, high confidentiality/in...

CVE-2024-24852

Uncontrolled search path in some IntelR Ethernet Adapter Complete Driver Pack install before versions 29.1 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-24852

Uncontrolled search path in some IntelR Ethernet Adapter Complete Driver Pack install before versions 29.1 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-36291

Uncontrolled search path for some IntelR Chipset Software Installation Utility before version 10.1.19867.8574 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-36291

The CVE-2024-36291 issue affects Intel’s Chipset Software Installation Utility (CSIU) prior to version 10.1.19867.8574. It is described as an Uncontrolled search path, potentially enabling local privilege escalation for an authenticated user. The Intel advisory and related sources confirm the aff...