Design/Logic Flaw

Incorrect default permissions in installer for the IntelR SSD Toolbox versions before 2/9/2021 may allow a privileged user to potentially enable escalation of privilege via local access...

Design/Logic Flaw

Unchecked return value in some IntelR Graphics Drivers before version 26.20.100.8141 may allow a privileged user to potentially enable a denial of service via local access...

CVE-2020-24494

Insufficient access control in the firmware for the IntelR 722 Ethernet Controllers before version 1.4.3 may allow a privileged user to potentially enable denial of service via local access...

CVE-2020-24458

Incomplete cleanup in some IntelR PROSet/Wireless WiFi and Killer TM drivers before version 22.0 may allow a privileged user to potentially enable information disclosure and denial of service via adjacent access...

Input validation

Insufficient input validation in some IntelR Graphics Drivers before version 27.20.100.8587 may allow a privileged user to potentially enable an escalation of privilege via local access...

CVE-2020-24491

Debug message containing addresses of memory transactions in some IntelR 10th Generation Core Processors supporting SGX may allow a privileged user to potentially enable information disclosure via local access...

Input validation

Improper input validation in some IntelR Graphics Drivers for Windows before version 26.20.100.7212 and before Linux kernel version 5.5 may allow a privileged user to potentially enable a denial of service via local access...

CVE-2020-24480

Out-of-bounds write in the IntelR XTU before version 6.5.3.25 may allow a privileged user to potentially enable denial of service via local access...

Design/Logic Flaw

Incorrect default permissions in the installer for the IntelR RealSenseTM DCM may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2020-12370

Untrusted pointer dereference in some IntelR Graphics Drivers before version 26.20.100.8141 may allow a privileged user to potentially enable a denial of service via local access...

CVE-2020-12385

Improper input validation in some IntelR Graphics Drivers before version 26.20.100.8141 may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2020-12367

Integer overflow in some IntelR Graphics Drivers before version 26.20.100.8476 may allow a privileged user to potentially enable an escalation of privilege via local access...

CVE-2020-8701

Incorrect default permissions in installer for the IntelR SSD Toolbox versions before 2/9/2021 may allow a privileged user to potentially enable escalation of privilege via local access...

Shining a Light on SolarCity: Practical Exploitation of the X2e IoT Device (Part One)

In 2019, Mandiant’s Red Team discovered a series of vulnerabilities present within Digi International’s ConnectPort X2e device, which allows for remote code execution as a privileged user. Specifically, Mandiant’s research focused on SolarCity’s now owned by Tesla rebranded ConnectPort X2e device...

CVE-2021-21512

Dell EMC PowerProtect Cyber Recovery, version 19.7.0.1, contains an Information Disclosure vulnerability. A locally authenticated high privileged Cyber Recovery user may potentially exploit this vulnerability leading to the takeover of the notification email account...

CVE-2020-12362

Integer overflow in the firmware for some IntelR Graphics Drivers for Windows before version 26.20.100.7212 and before Linux kernel version 5.5 may allow a privileged user to potentially enable an escalation of privilege via local access...

CVE-2021-20188

A flaw was found in podman before 1.7.0. File permissions for non-root users running in a privileged container are not correctly checked. This flaw can be abused by a low-privileged user inside the container to access any other file in the container, even if owned by the root user inside the...

CVE-2020-8355

An internal product security audit of Lenovo XClarity Administrator LXCA prior to version 3.1.0 discovered the Windows OS credentials provided by the LXCA user to perform driver updates of managed systems may be captured in the First Failure Data Capture FFDC service log if the service log is...

CVE-2020-8355

An internal product security audit of Lenovo XClarity Administrator LXCA prior to version 3.1.0 discovered the Windows OS credentials provided by the LXCA user to perform driver updates of managed systems may be captured in the First Failure Data Capture FFDC service log if the service log is...

Intel Graphics Drivers 输入验证错误漏洞

Intel is an American company that develops CPUs and is the world's largest manufacturer of personal computer parts and CPUs. The Intel® Graphics Drivers Multi-Generation Processor Input Validation Error vulnerability can be exploited by an attacker to allow a privileged user to potentially enable...