Input validation

Improper input validation in some IntelR Server System M70KLP Family BIOS firmware before version 01.04.0029 may allow a privileged user to potentially enable escalation of privilege via local access...

Improper access control

Improper access control for some Intel Unison software may allow a privileged user to potentially enable denial of service via local access...

Improper access control

Improper access control in some IntelR Aptio V UEFI Firmware Integrator Tools before version iDmi Windows 5.27.03.0003 may allow a privileged user to potentially enable escalation of privilege via local access...

Input validation

Incomplete cleanup for some Intel Unison software may allow a privileged user to potentially enable denial of service via local access...

Improper access control

Improper access control for some Intel Unison software may allow a privileged user to potentially enable escalation of privilege via network access...

CVE-2022-24379

Improper input validation in some IntelR Server System M70KLP Family BIOS firmware before version 01.04.0029 may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2022-24379

The CVE relates to Intel Server System M70KLP Family BIOS firmware (before 01.04.0029). Root cause is improper input validation in the BIOS firmware, potentially allowing a privileged user to escalate privileges via local access. Affected products include Intel Server System M70KLP family BIOS fi...

CVE-2023-34431

CVE-2023-34431 : Intel Server Board BIOS firmware vulnerability due to improper input validation that may allow a privileged user to escalate privileges via local access. Affects various Intel Server Board/Server System BIOS firmware families (e.g., M20NTP, M70KLP, M10JNP2SB, S2600BP family). Imp...

CVE-2022-33945

CVE-2022-33945 involves improper input validation in some Intel® Server Board and Intel® Server System BIOS firmware, potentially allowing a privileged user to escalate privileges via local access. The issue affects Intel Server Board/System BIOS firmware (various families and products listed by ...

CVE-2023-40220

Improper buffer restrictions in some IntelR NUC BIOS firmware may allow a privileged user to potentially enable information disclosure via local access...

CVE-2023-32662

Improper authorization in some Intel Battery Life Diagnostic Tool installation software before version 2.2.1 may allow a privilaged user to potentially enable escalation of privilege via local access...

CVE-2023-32662

Improper authorization in some Intel Battery Life Diagnostic Tool installation software before version 2.2.1 may allow a privilaged user to potentially enable escalation of privilege via local access...

CVE-2022-36374

Improper access control in some IntelR Aptio V UEFI Firmware Integrator Tools before version iDmi Windows 5.27.03.0003 may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2022-36374

Improper access control in some IntelR Aptio V UEFI Firmware Integrator Tools before version iDmi Windows 5.27.03.0003 may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2022-36396

The CVE-2022-36396 issue affects Intel® Aptio* V UEFI Firmware Integrator Tools prior to iDmiEdit-Linux-5.27.06.0017, due to improper access control that may allow a privileged local user to escalate privileges. Public details confirm affected versions and suggest updating to iDmiEdit-Linux-5.27....

CVE-2022-46298

CVE-2022-46298 involves incomplete cleanup in Intel Unison software that may allow a privileged local attacker to trigger a denial-of-service condition. Public sources in the provided documents identify the issue as a local-access vulnerability in Intel Unison components, with an impact on availa...

CVE-2022-46298

Incomplete cleanup for some Intel Unison software may allow a privileged user to potentially enable denial of service via local access...

kernel: ext4: use-after-free in ext4_xattr_set_entry()

A use-after-free vulnerability was found in the Linux kernel's ext4 filesystem in the way it handled the extra inode size for extended attributes. This flaw allows a privileged local user to cause a system crash or other undefined behaviors...

kernel: vmwgfx: race condition leading to information disclosure vulnerability

A race condition vulnerability was found in the vmwgfx driver in the Linux kernel. The flaw exists within the handling of GEM objects. The issue results from improper locking when performing operations on an object. This flaw allows a local privileged user to disclose information in the context o...

kernel: lib/seq_buf.c has a seq_buf_putmem_hex buffer overflow

A buffer overflow write flaw was identified in seqbufputmemhex in lib/seqbuf.c in seqbuf in the Linux Kernel. This issue may allow a user with special debug privileges such as ftrace or root to cause an overflow in the destination buffer due to a missing sanity check...