CVE-2019-11123: Improper Input Validation

Insufficient session validation in system firmware for IntelR NUC Kit may allow a privileged user to potentially enable escalation of privilege, denial of service and/or information disclosure via local access...

CVE-2019-0164: Undefined Security Weakness

Improper permissions in the installer for IntelR Turbo Boost Max Technology 3.0 driver version 1.0.0.1035 and before may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2019-0128: Undefined Security Weakness

Improper permissions in the installer for IntelR Chipset Device Software INF Update Utility before version 10.1.1.45 may allow an authenticated user to escalate privilege via local access...

PT-2019-2392

Name of the Vulnerable Software and Affected Versions IntelR NUC Kit affected versions not specified Description The issue is related to a buffer overflow in the system firmware, which may allow a privileged user to potentially enable escalation of privilege, denial of service, and/or information...

Huawei eSpace Meeting 1.1.11.103 - 'cenwpoll.dll' SEH Buffer Overflow (Unicode)

!/usr/bin/env python -- coding: utf-8 -- Huawei eSpace Meeting cenwpoll.dll Unicode Stack Buffer Overflow with SEH Overwrite Vendor: Huawei Technologies Co., Ltd. Product web page: https://www.huawei.com Affected application: eSpace 1.1.11.103 aka eSpace ECS, eSpace Desktop, eSpace Meeting, eSpac...

CVE-2019-0170

Buffer overflow in subsystem in IntelR DAL before version 12.0.35 may allow a privileged user to potentially enable escalation of privilege via local access...

Code injection

Code injection vulnerability in installer for IntelR CSME before versions 11.8.65, 11.11.65, 11.22.65, 12.0.35 and IntelR TXE 3.1.65, 4.0.15 may allow an unprivileged user to potentially enable escalation of privilege via local access...

Input validation

Insufficient input validation vulnerability in subsystem for IntelR AMT before versions 11.8.65, 11.11.65, 11.22.65, 12.0.35 may allow an unauthenticated user to potentially enable escalation of privilege via physical access...

Design/Logic Flaw

Insufficient data sanitization vulnerability in HECI subsystem for IntelR CSME before versions 11.8.65, 11.11.65, 11.22.65, 12.0.35 and IntelR SPS before version SPSE305.00.04.027.0 may allow a privileged user to potentially enable information disclosure via local access...

CVE-2019-0091

Code injection vulnerability in installer for IntelR CSME before versions 11.8.65, 11.11.65, 11.22.65, 12.0.35 and IntelR TXE 3.1.65, 4.0.15 may allow an unprivileged user to potentially enable escalation of privilege via local access...

CVE-2019-0170

Buffer overflow in subsystem in IntelR DAL before version 12.0.35 may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2019-0096

Out of bound write vulnerability in subsystem for IntelR AMT before versions 11.8.65, 11.11.65, 11.22.65, 12.0.35 may allow an authenticated user to potentially enable escalation of privilege via adjacent network access...

CVE-2019-11114

Intel® Driver & Support Assistant (DSA) prior to version 19.4.18 is affected by CVE-2019-11114 due to insufficient input validation, enabling a local-privilege user to potentially cause a denial of service. The issue affects DSA v19.3.12.3 and earlier. Intel’s advisory recommends updating to 19.4...

CVE-2019-0115: Improper Input Validation

Insufficient input validation in KMD module for IntelR Graphics Driver before version 10.18.14.5067 aka 15.36.x.5067 and 10.18.10.5069 aka 15.33.x.5069 may allow an authenticated user to potentially enable denial of service via local access...

CVE-2019-0119: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow vulnerability in system firmware for IntelR XeonR Processor D Family, IntelR XeonR Scalable Processor, IntelR Server Board, IntelR Server System and IntelR Compute Module may allow a privileged user to potentially enable escalation of privilege and/or denial of service via local...

CVE-2019-0126: Undefined Security Weakness

Insufficient access control in silicon reference firmware for IntelR XeonR Scalable Processor, IntelR XeonR Processor D Family may allow a privileged user to potentially enable escalation of privilege and/or denial of service via local access...

PT-2019-11176

Name of the Vulnerable Software and Affected Versions: IntelR SPS versions prior to SPS E5 04.00.04.381.0 IntelR SPS versions prior to SPS E3 04.01.04.054.0 IntelR SPS versions prior to SPS SoC-A 04.00.04.181.0 IntelR SPS versions prior to SPS SoC-X 04.00.04.086.0 Description: The issue is relate...

CVE-2019-0120: Insufficiently Protected Credentials

Insufficient key protection vulnerability in silicon reference firmware for IntelR PentiumR Processor J Series, IntelR PentiumR Processor N Series, IntelR CeleronR J Series, IntelR CeleronR N Series, IntelR AtomR Processor A Series, IntelR AtomR Processor E3900 Series, IntelR PentiumR Processor...

CVE-2019-0114: Concurrent Execution using Shared Resource with Improper Synchronization

A race condition in IntelR Graphics Drivers before version 10.18.14.5067 aka 15.36.x.5067 and 10.18.10.5069 aka 15.33.x.5069 may allow an authenticated user to potentially enable a denial of service via local access...

CVE-2019-0138: Incorrect Permission Assignment for Critical Resource

Improper directory permissions in IntelR ACU Wizard version 12.0.0.129 and earlier may allow an authenticated user to potentially enable escalation of privilege via local access...