CVE-2024-39372

Intel® XTU software for Windows is affected by CVE-2024-39372 due to an uncontrolled search path, potentially allowing an authenticated user to escalate privileges via local access. The issue affects versions prior to 7.14.2.14. Mitigation: update Intel® XTU to version 7.14.2.14 or later. Referen...

CVE-2024-32938

Uncontrolled search path for some IntelR MPI Library for Windows software before version 2021.13 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-32938

CVE-2024-32938 affects Intel(R) MPI Library for Windows prior to 2021.13. The vulnerability is an uncontrolled search path in the library that could allow an authenticated user to escalate privileges via local access. Affected products include Intel(R) MPI Library for Windows software before 2021...

PT-2025-6668 · Intel · Intel Proset/Wireless Wifi +1

Name of the Vulnerable Software and Affected Versions: IntelR PROSet/Wireless WiFi and Killer WiFi software for Windows versions prior to 23.80 Description: The issue is related to improper input validation in some IntelR PROSet/Wireless WiFi and Killer WiFi software for Windows, which may allow ...

CVE-2022-21804

Out-of-bounds write in software for the Intel QAT Driver for Windows before version 1.9.0-0008 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-41699

Incorrect permission assignment for critical resource in some IntelR QAT drivers for Windows before version 1.9.0 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-40681

A incorrect authorization in Fortinet FortiClient Windows 7.0.0 - 7.0.7, 6.4.0 - 6.4.9, 6.2.0 - 6.2.9 and 6.0.0 - 6.0.10 allows an attacker to cause denial of service via sending a crafted request to a specific named pipe...

The vulnerability of Intel NUC Software Studio Service’s software for the Windows operating system, related to the operation of writing beyond the buffer in memory, allows a perpetrator to trigger a service failure.

The vulnerability of Intel NUC Software Studio Service’s software for the Windows operating system is related to operations that go beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2024-35201

Incorrect default permissions in the IntelR SDP Tool for Windows software all versions may allow an authenticated user to enable escalation of privilege via local access...

PT-2024-25376 · Intel · Intel Proset/Wireless Wifi

Name of the Vulnerable Software and Affected Versions: IntelR PROSet/Wireless WiFi software for Windows versions prior to 23.60 Description: The issue is related to improper input validation in IntelR PROSet/Wireless WiFi software for Windows, which may allow a privileged user to potentially enab...

PT-2024-26406 · Intel · Intel Proset/Wireless Wifi

Name of the Vulnerable Software and Affected Versions: IntelR PROSet/Wireless WiFi software for Windows versions prior to 23.60 Description: The issue is related to an uncontrolled search path element in the software, which may allow an authenticated user to potentially enable escalation of...

PT-2024-22640 · Intel · Intel Ipp

Name of the Vulnerable Software and Affected Versions: IntelR IPP software for Windows versions prior to 2021.12.0 Description: The issue is related to an uncontrolled search path in some IntelR IPP software for Windows, which may allow an authenticated user to potentially enable escalation of...

Intel® Binary Configuration Tool Software Advisory

Summary: Potential security vulnerabilities in some Intel® Binary Configuration Tool software may allow escalation of privilege. Intel is releasing software updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2024-25647 Description: Incorrect default permissions...

ACAT Software Advisory

Summary: A potential security vulnerability in some Assistive Context-Aware Toolkit ACAT software maintained by Intel® may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2024-37024 Description:...

The Windows Registry Adventure #3: Learning resources

Posted by Mateusz Jurczyk, Google Project Zero When tackling a new vulnerability research target, especially a closed-source one, I prioritize gathering as much information about it as possible. This gets especially interesting when it's a subsystem as old and fundamental as the Windows registry...

CVE-2023-41234

NULL pointer dereference in IntelR Power Gadget software for Windows all versions may allow an authenticated user to potentially enable denial of service via local access...

PT-2024-12894 · Intel · Intel Proset/Wireless Wifi

Name of the Vulnerable Software and Affected Versions: IntelR PROSet/Wireless WiFi software for Windows versions prior to 23.20 Description: A race condition in the IntelR PROSet/Wireless WiFi software for Windows may allow an unauthenticated user to potentially enable denial of service via...

Gradio allows credential leakage on Windows

Gradio before 4.20 allows credential leakage on Windows...

PYSEC-2024-255

Gradio before 4.20 allows credential leakage on Windows...

CVE-2023-41151

An uncaught exception issue discovered in Softing OPC UA C++ SDK before 6.30 for Windows operating system may cause the application to crash when the server wants to send an error packet, while socket is blocked on writing...