CVE-2019-0086: Improper Link Resolution Before File Access

Insufficient access control vulnerability in Dynamic Application Loader software for IntelR CSME before versions 11.8.65, 11.11.65, 11.22.65, 12.0.35 and IntelR TXE 3.1.65, 4.0.15 may allow an unprivileged user to potentially enable escalation of privilege via local access...

CVE-2019-0153: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in subsystem in IntelR CSME 12.0.0 through 12.0.34 may allow an unauthenticated user to potentially enable escalation of privilege via network access...

CVE-2019-0170: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in subsystem in IntelR DAL before version 12.0.35 may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2019-0099: Undefined Security Weakness

Insufficient access control vulnerability in subsystem in IntelR SPS before version SPSE305.00.04.027.0 may allow an unauthenticated user to potentially enable escalation of privilege via physical access...

CVE-2019-11085: Improper Input Validation

Insufficient input validation in Kernel Mode Driver in IntelR i915 Graphics for Linux before version 5.0 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2019-0113: Improper Restriction of Operations within the Bounds of a Memory Buffer

Insufficient bounds checking in IntelR Graphics Drivers before version 10.18.14.5067 aka 15.36.x.5067 and 10.18.10.5069 aka 15.33.x.5069 may allow an authenticated user to potentially enable a denial of service via local access...

CVE-2019-0116: Out-of-bounds Read

An out of bound read in KMD module for IntelR Graphics Driver before version 10.18.14.5067 aka 15.36.x.5067 and 10.18.10.5069 aka 15.33.x.5069 may allow a privileged user to potentially enable denial of service via local access...

CVE-2019-0096: Out-of-bounds Write

Out of bound write vulnerability in subsystem for IntelR AMT before versions 11.8.65, 11.11.65, 11.22.65, 12.0.35 may allow an authenticated user to potentially enable escalation of privilege via adjacent network access...

CVE-2019-0093: Undefined Security Weakness

Insufficient data sanitization vulnerability in HECI subsystem for IntelR CSME before versions 11.8.65, 11.11.65, 11.22.65, 12.0.35 and IntelR SPS before version SPSE305.00.04.027.0 may allow a privileged user to potentially enable information disclosure via local access...

CVE-2019-11114: Improper Input Validation

Insufficient input validation in IntelR Driver & Support Assistant version 19.3.12.3 and before may allow a privileged user to potentially enable denial of service via local access...

CVE-2018-3701: Incorrect Permission Assignment for Critical Resource

Improper directory permissions in the installer for IntelR PROSet/Wireless WiFi Software version 20.100 and earlier may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2019-11095: Undefined Security Weakness

Insufficient access control in IntelR Driver & Support Assistant version 19.3.12.3 and before may allow a privileged user to potentially enable information disclosure via local access...

CVE-2019-11094: Improper Input Validation

Insufficient input validation in system firmware for Intel R NUC Kit may allow an authenticated user to potentially enable escalation of privilege, denial of service, and/or information disclosure via local access...

CVE-2019-11093: Unquoted Search Path or Element

Unquoted service path in the installer for the IntelR SCS Discovery Utility version 12.0.0.129 and earlier may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2019-0089: Undefined Security Weakness

Improper data sanitization vulnerability in subsystem in IntelR SPS before versions SPSE504.00.04.381.0, SPSE304.01.04.054.0, SPSSoC-A04.00.04.181.0, and SPSSoC-X04.00.04.086.0 may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2019-0094: Improper Input Validation

Insufficient input validation vulnerability in subsystem for IntelR AMT before versions 11.8.65, 11.11.65, 11.22.65, 12.0.35 may allow an unauthenticated user to potentially enable denial of service via adjacent network access...

CVE-2019-0098: Undefined Security Weakness

Logic bug vulnerability in subsystem for IntelR CSME before version 12.0.35, IntelR TXE before 3.1.65, 4.0.15 may allow an unauthenticated user to potentially enable escalation of privilege via physical access...

CVE-2019-0091: Improper Control of Generation of Code

Code injection vulnerability in installer for IntelR CSME before versions 11.8.65, 11.11.65, 11.22.65, 12.0.35 and IntelR TXE 3.1.65, 4.0.15 may allow an unprivileged user to potentially enable escalation of privilege via local access...

CVE-2019-0090: Undefined Security Weakness

Insufficient access control vulnerability in subsystem for IntelR CSME before versions 11.x, 12.0.35 IntelR TXE 3.x, 4.x, IntelR Server Platform Services 3.x, 4.x, IntelR SPS before version SPSE305.00.04.027.0 may allow an unauthenticated user to potentially enable escalation of privilege via...

CVE-2019-0097: Improper Input Validation

Insufficient input validation vulnerability in subsystem for IntelR AMT before version 12.0.35 may allow a privileged user to potentially enable denial of service via network access...