CVE-2022-36370: Improper Authentication

Improper authentication in BIOS firmware for some IntelR NUC Boards and IntelR NUC Kits before version MYi30060 may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2022-27639: Incomplete Cleanup

Incomplete cleanup in some IntelR XMMTM 7560 Modem software before version M27560R01.2146.00 may allow a privileged user to potentially enable escalation of privilege via adjacent access...

CVE-2022-27499: Operation on a Resource after Expiration or Release

Premature release of resource during expected lifetime in the IntelR SGX SDK software may allow a privileged user to potentially enable information disclosure via local access...

CVE-2022-27497: NULL Pointer Dereference

Null pointer dereference in firmware for IntelR AMT before version 11.8.93, 11.22.93, 11.12.93, 12.0.92, 14.1.67, 15.0.42, 16.1.25 may allow an unauthenticated user to potentially enable denial of service via network access...

CVE-2022-35276: Improper Access Control

Improper access control in BIOS firmware for some IntelR NUC 8 Compute Elements before version CBWHL357.0096 may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2022-25917: Improper Handling of Exceptional Conditions

Uncaught exception in the firmware for some IntelR Server Board M50CYP Family before version R01.01.0005 may allow a privileged user to potentially enable a denial of service via local access...

CVE-2022-26124: Improper Restriction of Operations within the Bounds of a Memory Buffer

Improper buffer restrictions in BIOS firmware for some IntelR NUC Boards, IntelR NUC 8 Boards, IntelR NUC 8 Rugged Boards and IntelR NUC 8 Rugged Kits before version CHAPLCEL.0059 may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2022-26045: Improper Restriction of Operations within the Bounds of a Memory Buffer

Improper buffer restrictions in some IntelR XMMTM 7560 Modem software before version M27560R01.2146.00 may allow a privileged user to potentially enable escalation of privilege via physical access...

CVE-2022-36349: Initialization of a Resource with an Insecure Default

Insecure default variable initialization in BIOS firmware for some IntelR NUC Boards and IntelR NUC Kits before version MYi30060 may allow an authenticated user to potentially enable denial of service via local access...

CVE-2022-27638: Uncontrolled Search Path Element

Uncontrolled search path element in the IntelR Advanced Link Analyzer Pro before version 22.2 and Standard edition software before version 22.1.1 STD may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-36400: Improper Limitation of a Pathname to a Restricted Directory

Path traversal in the installer software for some Intelr NUC Kit Wireless Adapter drivers for Windows 10 before version 22.40 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-36367: Incorrect Default Permissions

Incorrect default permissions in the IntelR Support Android application before version v22.02.28 may allow a privileged user to potentially enable information disclosure via local access...

CVE-2021-33164: Undefined Security Weakness

Improper access control in BIOS firmware for some IntelR NUCs before version INWHL357.0046 may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2022-32569: Improper Restriction of Operations within the Bounds of a Memory Buffer

Improper buffer restrictions in BIOS firmware for some IntelR NUC M15 Laptop Kits before version BCTGL357.0074 may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2022-30542: Improper Input Validation

Improper input validation in the firmware for some IntelR Server Board S2600WF, IntelR Server System R1000WF and IntelR Server System R2000WF families before version R02.01.0014 may allow a privileged user to potentially enable an escalation of privilege via local access...

CVE-2022-30691: Uncontrolled Resource Consumption

Uncontrolled resource consumption in the IntelR Support Android application before version 22.02.28 may allow an authenticated user to potentially enable denial of service via local access...

CVE-2022-29893: Improper Authentication

Improper authentication in firmware for IntelR AMT before versions 11.8.93, 11.22.93, 11.12.93, 12.0.92, 14.1.67, 15.0.42, 16.1.25 may allow an authenticated user to potentially enable escalation of privilege via network access...

CVE-2022-30548: Uncontrolled Search Path Element

Uncontrolled search path element in the IntelR Glorp software may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-28667: Out-of-bounds Write

Out-of-bounds write for some IntelR PROSet/Wireless WiFi software before version 22.140 may allow an unauthenticated user to potentially enable denial of service via adjacent access...

CVE-2022-29515: Missing Release of Memory after Effective Lifetime

Missing release of memory after effective lifetime in firmware for IntelR SPS before versions SPSE306.00.03.035.0 may allow a privileged user to potentially enable denial of service via local access...