PT-2022-3788

Name of the Vulnerable Software and Affected Versions IntelR RealSenseTM ID Solution F450 versions prior to 2.6.0.74 Description The issue is related to insecure default variable initialization, which may allow an unauthenticated user to enable information disclosure via physical access. This is...

PT-2022-3030

Name of the Vulnerable Software and Affected Versions IntelR Manageability Commander versions prior to 2.2 Description The issue is related to improper input validation, which may allow an authenticated user to potentially enable escalation of privilege via adjacent access. This could be exploite...

PT-2022-3920

Name of the Vulnerable Software and Affected Versions IntelR NUCs affected versions not specified Description The issue is related to improper buffer restrictions in the firmware of some IntelR NUCs, which may allow a privileged user to potentially enable escalation of privilege via local access...

Privilege Escalation

intel-ucode is vulnerable to privilege escalation. The vulnerability exists due to a lack of sanitiztion during activation of test or debug logic at runtime for some IntelR processors which may allow an unauthenticated user to potentially enable escalation of privilege via physical access...

CVE-2022-0002

Non-transparent sharing of branch predictor within a context in some IntelR Processors may allow an authorized user to potentially enable information disclosure via local access...

CVE-2021-33150: Undefined Security Weakness

Hardware allows activation of test or debug logic at runtime for some IntelR Trace Hub instances which may allow an unauthenticated user to potentially enable escalation of privilege via physical access...

PT-2022-6587

Name of the Vulnerable Software and Affected Versions IntelR i915 Graphics drivers for linux versions prior to kernel version 6.2.10 Description The issue is related to improper restriction of operations within the bounds of a memory buffer in some IntelR i915 Graphics drivers for linux. This may...

CVE-2022-0002: Undefined Security Weakness

Non-transparent sharing of branch predictor within a context in some IntelR Processors may allow an authorized user to potentially enable information disclosure via local access...

CVE-2022-0001

Non-transparent sharing of branch predictor selectors between contexts in some IntelR Processors may allow an authorized user to potentially enable information disclosure via local access...

CVE-2022-0001: Undefined Security Weakness

Non-transparent sharing of branch predictor selectors between contexts in some IntelR Processors may allow an authorized user to potentially enable information disclosure via local access...

PT-2022-37660

Уязвимость драйвера IntelR Management Engine связана с неверным ограничением имени пути к каталогу с ограниченным доступом. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, выполнить произвольный код...

Updated nonfree firmware packages fix security vulnerabilities

This update provides new and updated nonfree firmwares and fixes at least the following security issues: Improper input validation in firmware for IntelR PROSet/Wireless Wi-Fi may allow an unauthenticated user to potentially enable escalation of privilege via local access CVE-2021-0066 / SA-00539...

CVE-2021-33101

Uncontrolled search path in the IntelR GPA software before version 21.2 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2021-0060

Insufficient compartmentalization in HECI subsystem for the IntelR SPS before versions SPSE504.01.04.516.0, SPSE504.04.04.033.0, SPSE504.04.03.281.0, SPSE503.01.03.116.0, SPSE305.01.04.309.0, SPS02.04.00.101.0, SPSSoC-A05.00.03.114.0, SPSSoC-X04.00.04.326.0, SPSSoC-X03.00.03.117.0,...

Information disclosure

Incorrect default permissions for the IntelR RXT for Chromebook application, all versions, may allow an authenticated user to potentially enable information disclosure via local access...

Privilege escalation

Uncontrolled search path in the IntelR GPA software before version 21.2 may allow an authenticated user to potentially enable escalation of privilege via local access...

Input validation

Improper Use of Validation Framework in firmware for some IntelR PROSet/Wireless Wi-Fi in multiple operating systems and some KillerTM Wi-Fi in Windows 10 and 11 may allow a unauthenticated user to potentially enable denial of service via adjacent access...

CVE-2022-21153

Improper access control in the IntelR Capital Global Summit Android application may allow an authenticated user to potentially enable information disclosure via local access...

CVE-2021-33139

Improper conditions check in firmware for some IntelR Wireless BluetoothR and KillerTM BluetoothR products before version 22.100 may allow an authenticated user to potentially enable denial of service via adjacent access...

CVE-2021-33114

Improper input validation for some IntelR PROSet/Wireless WiFi in multiple operating systems and KillerTM WiFi in Windows 10 and 11 may allow an authenticated user to potentially enable denial of service via adjacent access...