CVE-2020-8753

Out-of-bounds read in DHCP subsystem for IntelR AMT, IntelR ISM versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70 and 14.0.45 may allow an unauthenticated user to potentially enable information disclosure via network access...

CVE-2020-8746

Integer overflow in subsystem for IntelR AMT versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70 and 14.0.45 may allow an unauthenticated user to potentially enable denial of service via adjacent access...

CVE-2020-12354

Incorrect default permissions in WindowsR installer in IntelR AMT SDK versions before 14.0.0.1 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2020-8757

Out-of-bounds read in subsystem for IntelR AMT versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70 and 14.0.45 may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2020-8752

Out-of-bounds write in IPv6 subsystem for IntelR AMT, IntelR ISM versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70, 14.0.45 may allow an unauthenticated user to potentially enable escalation of privileges via network access...

CVE-2020-8754

Out-of-bounds read in subsystem for IntelR AMT, IntelR ISM versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70 and 14.0.45 may allow an unauthenticated user to potentially enable information disclosure via network access...

2 More Google Chrome Zero-Days Under Active Exploitation

Google is asking Chrome desktop users to prepare to update their browsers once again as two more zero-day vulnerabilities have been identified in the software. Both allow an unauthenticated, remote attacker to compromise an affected system via the web. And both are being actively exploited in the...

Two New Chrome 0-Days Under Active Attacks – Update Your Browser

Google has patched two more zero-day flaws in the Chrome web browser for desktop, making it the fourth and fifth actively exploited vulnerabilities addressed by the search giant in recent weeks. The company released 86.0.4240.198 for Windows, Mac, and Linux, which it said will be rolling out over...

CVE-2020-8353

Prior to August 10, 2020, some Lenovo Desktop and Workstation systems were shipped with the Embedded Host Based Configuration EHBC feature of Intel AMT enabled. This could allow an administrative user with local access to configure Intel AMT...

CVE-2020-8353

Prior to August 10, 2020, some Lenovo Desktop and Workstation systems were shipped with the Embedded Host Based Configuration EHBC feature of Intel AMT enabled. This could allow an administrative user with local access to configure Intel AMT...

RHEL 8 : microcode_ctl (RHSA-2020:5085)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2020:5085 advisory. Security Fixes: hw: Information disclosure issue in Intel SGX via RAPL interface CVE-2020-8695 hw: Vector Register Leakage-Active...

RHEL 7 : microcode_ctl (RHSA-2020:5083)

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2020:5083 advisory. Security Fixes: hw: Information disclosure issue in Intel SGX via RAPL interface CVE-2020-8695 hw: Vector Register Leakage-Active...

PT-2020-4866 · Intel · Intel Amt +1

Name of the Vulnerable Software and Affected Versions: IntelR AMT versions prior to 11.8.80 IntelR AMT versions prior to 11.12.80 IntelR AMT versions prior to 11.22.80 IntelR AMT versions prior to 12.0.70 IntelR AMT versions prior to 14.0.45 IntelR ISM versions prior to 11.8.80 IntelR ISM version...

PT-2020-4741 · Intel · Intel Amt

Name of the Vulnerable Software and Affected Versions: IntelR AMT versions before 11.8.80 IntelR AMT versions before 11.12.80 IntelR AMT versions before 11.22.80 IntelR AMT versions before 12.0.70 IntelR AMT versions before 14.0.45 Description: The issue is caused by an integer overflow in the...

PT-2020-4736 · Intel · Intel Amt

Name of the Vulnerable Software and Affected Versions: IntelR AMT versions prior to 11.8.80 IntelR AMT versions prior to 11.12.80 IntelR AMT versions prior to 11.22.80 IntelR AMT versions prior to 12.0.70 IntelR AMT versions prior to 14.0.45 Description: The issue is related to an out-of-bounds...

PT-2020-4740 · Intel · Intel Amt

Name of the Vulnerable Software and Affected Versions: IntelR AMT versions prior to 11.8.80 IntelR AMT versions prior to 11.12.80 IntelR AMT versions prior to 11.22.80 IntelR AMT versions prior to 12.0.70 IntelR AMT versions prior to 14.0.45 Description: The issue is related to an out-of-bounds...

PT-2020-4738 · Intel · Intel Amt

Name of the Vulnerable Software and Affected Versions: IntelR AMT versions prior to 11.8.80 IntelR AMT versions prior to 11.12.80 IntelR AMT versions prior to 11.22.80 IntelR AMT versions prior to 12.0.70 IntelR AMT versions prior to 14.0.45 Description: The issue is related to an out-of-bounds...

PT-2020-4739 · Intel · Intel Amt

Name of the Vulnerable Software and Affected Versions: IntelR AMT versions prior to 11.8.80 IntelR AMT versions prior to 11.12.80 IntelR AMT versions prior to 11.22.80 IntelR AMT versions prior to 12.0.70 IntelR AMT versions prior to 14.0.45 Description: The issue is caused by an integer overflow...

PT-2020-4734 · Intel · Intel Ism +1

Name of the Vulnerable Software and Affected Versions: IntelR AMT, IntelR ISM versions before 11.8.80 IntelR AMT, IntelR ISM versions before 11.12.80 IntelR AMT, IntelR ISM versions before 11.22.80 IntelR AMT, IntelR ISM versions before 12.0.70 IntelR AMT, IntelR ISM versions before 14.0.45...

PT-2020-4776 · Microsoft +7 · Kerberos +9

Name of the Vulnerable Software and Affected Versions: Windows versions prior to the fixed version Description: A security feature bypass vulnerability exists in the way Key Distribution Center KDC determines if a service ticket can be used for delegation via Kerberos Constrained Delegation KCD. ...