CVE-2024-29223

Uncontrolled search path for some IntelR QuickAssist Technology software before version 2.2.0 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-31153

Improper input validation for some IntelR QuickAssist Technology software before version 2.2.0 may allow an authenticated user to potentially enable denial of service via local access...

CVE-2024-31153

CVE-2024-31153 involves Intel(R) QuickAssist Technology software prior to version 2.2.0 with an improper input validation flaw. An authenticated local user may trigger denial of service. Intel recommends updating to version 2.2.0 or later. The issue is documented in Intel’s advisory (INTEL-SA-011...

CVE-2024-31153

Improper input validation for some IntelR QuickAssist Technology software before version 2.2.0 may allow an authenticated user to potentially enable denial of service via local access...

CVE-2024-31153

Improper input validation for some IntelR QuickAssist Technology software before version 2.2.0 may allow an authenticated user to potentially enable denial of service via local access...

CVE-2024-29223

CVE-2024-29223 concerns Intel(R) QuickAssist Technology software before version 2.2.0. The issue is an uncontrolled search path that may allow an authenticated user to escalate privileges via local access. Connected Intel advisories also reference related CVEs (CVE-2024-31858, CVE-2023-32277, CVE...

CVE-2024-29223

Uncontrolled search path for some IntelR QuickAssist Technology software before version 2.2.0 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-29223

Uncontrolled search path for some IntelR QuickAssist Technology software before version 2.2.0 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-31858

Out-of-bounds write for some IntelR QuickAssist Technology software before version 2.2.0 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-31858

Out-of-bounds write for some IntelR QuickAssist Technology software before version 2.2.0 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-31858

Intel QuickAssist Technology software before version 2.2.0 is affected by CVE-2024-31858 due to an out-of-bounds write that could allow an authenticated user to escalate privileges via local access. The advisory and related sources consistently identify the affected component as Intel(R) QuickAss...

The Murky Ad-Tech World Powering Surveillance of US Military Personnel

A Florida data broker told a US senator it obtained sensitive data on US military members in Germany from a Lithuanian firm, which denies involvement—revealing the opaque nature of online ad surveillance...

The DEF CON 32 Hackers' Almanack

The DEF CON 32 Hackers' Almanack is a novel first cut at bridging the chasm between policy makers and technologists. Through a new initiative, dubbed "Franklin," the Almanack will elevate the most interesting, impactful and cutting edge talks, research, and vulnerabilities identified across the D...

Intel AMT and Intel Standard Manageability security vulnerabilities

Intel AMT and Intel Standard Manageability are both active management technology modules from Intel Corporation USA. A security vulnerability exists in Intel AMT and Intel Standard Manageability that stems from improper initialization and could allow a privileged user to disclose information via...

CVE-2024-31858: Out-of-bounds Write

Out-of-bounds write for some IntelR QuickAssist Technology software before version 2.2.0 may allow an authenticated user to potentially enable escalation of privilege via local access...

Intel AMT and Intel Standard Manageability input validation error vulnerabilities

Intel AMT and Intel Standard Manageability are both active management technology modules from Intel Corporation. An input validation error vulnerability exists in Intel AMT and Intel Standard Manageability that stems from improper input validation and could allow an authenticated user to trigger ...

CVE-2024-31153: Improper Input Validation

Improper input validation for some IntelR QuickAssist Technology software before version 2.2.0 may allow an authenticated user to potentially enable denial of service via local access...

CVE-2024-29223: Uncontrolled Search Path Element

Uncontrolled search path for some IntelR QuickAssist Technology software before version 2.2.0 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2023-31360

Incorrect default permissions in the AMD Integrated Management Technology AIM-T Manageability Service installation directory could allow an attacker to achieve privilege escalation, potentially resulting in arbitrary code execution...

CVE-2023-31361

A DLL hijacking vulnerability in AMD Integrated Management Technology AIM-T Manageability Service could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code execution...