CVE-2022-36400

This CVE affects Intel NUC Kit Wireless Adapter driver installer for Windows 10 prior to version 22.40. The issue is a path traversal vulnerability in the installer software that may allow an authenticated local user to escalate privileges. Affected products include various Intel NUC kits/boards ...

CVE-2022-36384

CVE-2022-36384 involves an unquoted search path in the Intel NUC Kit Wireless Adapter driver installer for Windows 10 prior to 22.40, potentially enabling local privilege escalation for an authenticated user. Affected products listed by Intel include various Intel NUC Kits/Boards (e.g., NUC8CCHKR...

Intel NUC security vulnerabilities

The Intel NUC is a small minicomputer from Intel Corporation USA. A security vulnerability exists in Intel NUC Kit Wireless Adapter versions prior to 22.40, which stems from incorrect default permissions. An attacker could exploit the vulnerability to escalate privileges...

CVE-2022-36377: Insecure Inherited Permissions

Insecure inherited permissions in some IntelR Wireless Adapter Driver installation software for IntelR NUC Kits & Mini PCs before version 22.190.0.3 for Windows may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-36380: Uncontrolled Search Path Element

Uncontrolled search path in the installer software for some Intelr NUC Kit Wireless Adapter drivers for Windows 10 before version 22.40 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-36384: Unquoted Search Path or Element

Unquoted search path in the installer software for some Intelr NUC Kit Wireless Adapter drivers for Windows 10 before version 22.40 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-36400: Improper Limitation of a Pathname to a Restricted Directory

Path traversal in the installer software for some Intelr NUC Kit Wireless Adapter drivers for Windows 10 before version 22.40 may allow an authenticated user to potentially enable escalation of privilege via local access...

PT-2022-23343 · Intel · Intel Nuc Kit Wireless Adapter Drivers

Name of the Vulnerable Software and Affected Versions: Intel NUC Kit Wireless Adapter drivers for Windows 10 versions prior to 22.40 Description: The issue is related to an unquoted search path in the installer software for some Intel NUC Kit Wireless Adapter drivers. This may allow an...

PT-2022-23337 · Intel +1 · Intel Nuc Kit Wireless Adapter Drivers +2

Name of the Vulnerable Software and Affected Versions: IntelR Wireless Adapter Driver installation software for IntelR NUC Kits & Mini PCs versions prior to 22.190.0.3 Intelr NUC Kit Wireless Adapter drivers for Windows 10 versions prior to 22.40 Description: The issue is related to insecure...

PT-2022-23352 · Intel +1 · Intel Nuc Kit Wireless Adapter Drivers +1

Name of the Vulnerable Software and Affected Versions: Intel NUC Kit Wireless Adapter drivers for Windows 10 versions prior to 22.40 Description: The issue concerns path traversal in the installer software, potentially allowing an authenticated user to enable escalation of privilege via local...

Intel NUC Kit code-related vulnerabilities

Intel NUC Kit is a small desktop computer from Intel Corporation USA. A security vulnerability exists in Intel NUC Kit Wireless Adapter versions prior to 22.40. An attacker could exploit the vulnerability to escalate privileges...

Intel NUC Kit path traversal vulnerability

Intel NUC Kit is a small desktop computer from Intel Corporation USA. A security vulnerability exists in Intel NUC Kit Wireless Adapter drivers prior to version 22.40. An attacker could exploit the vulnerability to escalate privileges...

Intel NUC Kit code-related vulnerabilities

Intel NUC Kit is a small desktop computer from Intel Corporation USA. A security vulnerability exists in Intel NUC Kit Wireless Adapter versions prior to 22.40. An attacker could exploit the vulnerability to escalate privileges...

Amazon Linux 2022 : bpftool, kernel, kernel-devel (ALAS2022-2022-185)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2022-2022-185 advisory. A flaw was found in the Linux kernel. The existing KVM SEV API has a vulnerability that allows a non-root host user-level application to crash the host kernel by creating a confidential guest V...

EulerOS 2.0 SP10 : kernel (EulerOS-SA-2022-2686)

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A race condition in the Linux kernel before 5.6.2 between the VTDISALLOCATE ioctl and closing/opening of ttys could lead to a use-after-free...

Use After Free

Linux kernel’s Atheros is vulnerable to Use After Free. The vulnerability exists in the wireless adapter driver in the way a user forces the ath9khtcwaitfortarget function to fail with some input messages. This flaw allows a local user to crash or potentially escalate their privileges on the syst...

MGASA-2022-0305 Updated kernel packages fix security vulnerabilities

This kernel update is based on upstream 5.15.62 and fixes at least the following security issues: A use-after-free flaw was found in the Linux kernel Atheros wireless adapter driver in the way a user forces the ath9khtcwaitfortarget function to fail with some input messages. This flaw allows a...

Updated kernel-linus packages fix security vulnerabilities

This kernel update is based on upstream 5.15.62 and fixes at least the following security issues: A use-after-free flaw was found in the Linux kernel Atheros wireless adapter driver in the way a user forces the ath9khtcwaitfortarget function to fail with some input messages. This flaw allows a...

Ubuntu 20.04 LTS : Linux kernel (Azure CVM) vulnerabilities (USN-5582-1)

The remote Ubuntu 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-5582-1 advisory. Arthur Mongodin discovered that the netfilter subsystem in the Linux kernel did not properly perform data validation. A local attacker could use this to...

SUSE SLES15 Security Update : kernel (Live Patch 0 for SLE 15 SP4) (SUSE-SU-2022:2854-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:2854-1 advisory. This update for the Linux Kernel 5.14.21-15040022 fixes several issues. The following security issues were fixed: - CVE-2022-28389: Fixed a...