CVE-2020-8760: Integer Overflow or Wraparound

Integer overflow in subsystem for IntelR AMT versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70, 14.0.45 may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2020-8752: Out-of-bounds Write

Out-of-bounds write in IPv6 subsystem for IntelR AMT, IntelR ISM versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70, 14.0.45 may allow an unauthenticated user to potentially enable escalation of privileges via network access...

CVE-2020-8753: Out-of-bounds Read

Out-of-bounds read in DHCP subsystem for IntelR AMT, IntelR ISM versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70 and 14.0.45 may allow an unauthenticated user to potentially enable information disclosure via network access...

CVE-2020-12297: Undefined Security Weakness

Improper access control in Installer for IntelR CSME Driver for Windows versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70, 13.0.40, 13.30.10, 14.0.45 and 14.5.25, Intel TXE 3.1.80, 4.0.30 may allow an authenticated user to potentially enable escalation of privileges via local access...

CVE-2020-12321: Undefined Security Weakness

Improper buffer restriction in some IntelR Wireless BluetoothR products before version 21.110 may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access...

CVE-2020-8698: Exposure of Resource to Wrong Sphere

Improper isolation of shared resources in some IntelR Processors may allow an authenticated user to potentially enable information disclosure via local access...

CVE-2020-8695: Observable Discrepancy

Observable discrepancy in the RAPL interface for some IntelR Processors may allow a privileged user to potentially enable information disclosure via local access...

CVE-2020-8737: Undefined Security Weakness

Improper buffer restrictions in the IntelR StratixR 10 FPGA firmware provided with the IntelR QuartusR Prime Pro software before version 20.1 may allow an unauthenticated user to potentially enable escalation of privilege and/or information disclosure via physical access...

CVE-2020-12330: Improper Preservation of Permissions

Improper permissions in the installer for the IntelR Falcon 8+ UAS AscTec Thermal Viewer, all versions, may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2020-12326: Improper Initialization

Improper initialization in some IntelR ThunderboltTM DCH drivers for Windows before version 72 may allow an authenticated user to potentially enable information disclosure via local access...

CVE-2020-12324: Undefined Security Weakness

Protection mechanism failure in some IntelR ThunderboltTM DCH drivers for Windows before version 72 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2020-12322: Improper Input Validation

Improper input validation in some IntelR Wireless BluetoothR products before version 21.110 may allow an unauthenticated user to potentially enable denial of service via adjacent access...

CVE-2020-12316: Insufficiently Protected Credentials

Insufficiently protected credentials in the IntelR EMA before version 1.3.3 may allow an authorized user to potentially enable information disclosure via local access...

CVE-2020-12328: Undefined Security Weakness

Protection mechanism failure in some IntelR ThunderboltTM DCH drivers for Windows before version 72 may allow a privileged user to potentially enable information disclosure via local access...

CVE-2020-12349: Improper Input Validation

Improper input validation in the IntelR Data Center Manager Console before version 3.6.2 may allow an authenticated user to potentially enable information disclosure via network access...

CVE-2020-12346: Incorrect Default Permissions

Improper permissions in the installer for the IntelR Battery Life Diagnostic Tool before version 1.0.7 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2020-24454: Improper Restriction of XML External Entity Reference

Improper Restriction of XML External Entity Reference in subsystem forIntelR QuartusR Prime Pro Edition before version 20.3 and IntelR QuartusR Prime Standard Edition before version 20.2 may allow unauthenticated user to potentially enable information disclosure via network access...

CVE-2020-8747: Out-of-bounds Read

Out-of-bounds read in subsystem for IntelR AMT versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70 and 14.0.45 may allow an unauthenticated user to potentially enable information disclosure and/or denial of service via network access...

CVE-2020-12329: Uncontrolled Search Path Element

Uncontrolled search path in the IntelR VTuneTM Profiler before version 2020 Update 1 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2020-0572: Improper Input Validation

Improper input validation in the firmware for IntelR Server Board S2600ST and S2600WF families may allow a privileged user to potentially enable escalation of privilege via local access...