CVE-2023-47169: DEPRECATED: Improper Sanitization of Custom Special Characters

Improper buffer restrictions in IntelR Media SDK software all versions may allow an authenticated user to potentially enable denial of service via local access...

CVE-2024-21823: Hardware Logic with Insecure De-Synchronization between Control and Data Channels

Hardware logic with insecure de-synchronization in IntelR DSA and IntelR IAA for some IntelR 4th or 5th generation XeonR processors may allow an authorized user to potentially enable escalation of privilege local access...

CVE-2022-37341: Improper Access Control

Improper access control in some IntelR Ethernet Adapters and IntelR Ethernet Controller I225 Manageability firmware may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2023-42668: Incorrect Default Permissions

Incorrect default permissions in some onboard video driver software before version 1.14 for IntelR Server Boards based on IntelR 62X Chipset may allow an authenticated user to potentially enable escalation of privilege via local access...

PT-2024-12726

Name of the Vulnerable Software and Affected Versions IntelR PROSet/Wireless WiFi software versions prior to 23.20 Description The issue is related to improper input validation, which may allow an unauthenticated user to potentially enable denial of service via adjacent access. Recommendations Fo...

CVE-2023-48727: Use of NullPointerException Catch to Detect NULL Pointer Dereference

NULL pointer dereference in some IntelR oneVPL software before version 23.3.5 may allow an authenticated user to potentially enable information disclosure via local access...

CVE-2023-41092: Unchecked Return Value

Unchecked return value in SDM firmware for IntelR Stratix 10 and IntelR Agilex 7 FPGAs before version 23.3 may allow an authenticated user to potentially enable denial of service via adjacent access...

CVE-2023-32282: Time-of-check Time-of-use (TOCTOU) Race Condition

Race condition in BIOS firmware for some IntelR Processors may allow a privileged user to potentially enable escalation of privilege via local access...

PT-2024-2536

Name of the Vulnerable Software and Affected Versions IntelR Processors affected versions not specified Description A race condition in the BIOS firmware of some IntelR Processors may allow a privileged user to potentially enable escalation of privilege via local access. This issue is related to...

CVE-2023-32666: On-Chip Debug and Test Interface With Improper Access Control

On-chip debug and test interface with improper access control in some 4th Generation IntelR XeonR Processors when using IntelR SGX or IntelR TDX may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2023-27502: Insertion of Sensitive Information into Log File

Insertion of sensitive information into log file for some IntelR Local Manageability Service software before version 2316.5.1.2 may allow an authenticated user to potentially enable information disclosure via local access...

CVE-2023-35191: Uncontrolled Resource Consumption

Uncontrolled resource consumption for some IntelR SPS firmware versions may allow a privileged user to potentially enable denial of service via network access...

CVE-2023-28389: Incorrect Default Permissions

Incorrect default permissions in some IntelR CSME installer software before version 2328.5.5.0 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2023-28746: Information Exposure through Microarchitectural State after Transient Execution

Information exposure through microarchitectural state after transient execution from some register files for some IntelR AtomR Processors may allow an authenticated user to potentially enable information disclosure via local access...

CVE-2023-43490: Incorrect Calculation

Incorrect calculation in microcode keying mechanism for some IntelR XeonR D Processors with IntelR SGX may allow a privileged user to potentially enable information disclosure via local access...

CVE-2023-32633: Improper Input Validation

Improper input validation in the IntelR CSME installer software before version 2328.5.5.0 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2023-22655: Protection Mechanism Failure

Protection mechanism failure in some 3rd and 4th Generation IntelR XeonR Processors when using IntelR SGX or IntelR TDX may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2023-38575: Non-Transparent Sharing of Microarchitectural Resources

Non-transparent sharing of return predictor targets between contexts in some IntelR Processors may allow an authorized user to potentially enable information disclosure via local access...

CVE-2023-39368: Protection Mechanism Failure

Protection mechanism failure of bus lock regulator for some IntelR Processors may allow an unauthenticated user to potentially enable denial of service via network access...

PT-2024-2523

Name of the Vulnerable Software and Affected Versions IntelR CSME installer software versions prior to 2328.5.5.0 Description The issue is related to incorrect default permissions in some IntelR CSME installer software, which may allow an authenticated user to potentially enable escalation of...