CVE-2023-34314: Insecure Inherited Permissions

Insecure inherited permissions in some IntelR Simics Simulator software before version 1.7.2 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2023-32660: Uncontrolled Search Path Element

Uncontrolled search path in some IntelR NUC Kit NUC6i7KYK ThunderboltTM 3 Firmware Update Tool installation software before version 46 may allow an authenticated user to potentially enable escalation of privilege via local access...

PT-2023-7284

Name of the Vulnerable Software and Affected Versions IntelR ArcTM & IrisR Xe Graphics - WHQL - Windows drivers versions prior to 31.0.101.4255 Description The issue is related to an out-of-bounds write in the graphics drivers, which may allow an authenticated user to potentially enable escalatio...

CVE-2023-28740: Uncontrolled Search Path Element

Uncontrolled search path element in some IntelR QAT drivers for Windows - HW Version 2.0 before version 2.0.4 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2023-28388: Uncontrolled Search Path Element

Uncontrolled search path element in some IntelR Chipset Device Software before version 10.1.19444.8378 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2023-26589: Use After Free

Use after free in some IntelR Aptio V UEFI Firmware Integrator Tools may allowed an authenticated user to potentially enable denial of service via local access...

CVE-2023-22310: Race Condition During Access to Alternate Channel

Race condition in some IntelR Aptio V UEFI Firmware Integrator Tools may allow an authenticated user to potentially enable denial of service via local access...

CVE-2022-42879: Use of NullPointerException Catch to Detect NULL Pointer Dereference

NULL pointer dereference in some IntelR ArcTM Control software before version 1.73.5335.2 may allow an authenticated user to potentially enable denial of service via local access...

CVE-2023-25952: Out-of-bounds Write

Out-of-bounds write in some IntelR ArcTM Control software before version 1.73.5335.2 may allow an authenticated user to potentially enable denial of service via local access...

CVE-2023-29165: Unquoted Search Path or Element

Unquoted search path or element in some IntelR ArcTM Control software before version 1.73.5335.2 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2023-22329: Improper Input Validation

Improper input validation in the BIOS firmware for some IntelR Processors may allow an authenticated user to potentially enable denial of service via adjacent access...

CVE-2023-25756: Out-of-bounds Read

Out-of-bounds read in the BIOS firmware for some IntelR Processors may allow an authenticated user to potentially enable escalation of privilege via adjacent access...

CVE-2023-40220: DEPRECATED: Improper Sanitization of Custom Special Characters

Improper buffer restrictions in some IntelR NUC BIOS firmware may allow a privileged user to potentially enable information disclosure via local access...

CVE-2023-24592: Improper Limitation of a Pathname to a Restricted Directory

Path traversal in the some IntelR oneAPI Toolkits and Component software before version 2023.1 may allow authenticated user to potentially enable escalation of privilege via local access...

CVE-2023-24588: Exposure of Sensitive Information to an Unauthorized Actor

Exposure of sensitive information to an unauthorized actor in firmware for some IntelR OptaneTM SSD products may allow an unauthenticated user to potentially enable information disclosure via physical access...

CVE-2023-27519: Improper Input Validation

Improper input validation in firmware for some IntelR OptaneTM SSD products may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2023-24587: Insufficient Control Flow Management

Insufficient control flow management in firmware for some IntelR OptaneTM SSD products may allow a privileged user to potentially enable denial of service via local access...

CVE-2023-27305: Incorrect Default Permissions

Incorrect default permissions in some IntelR ArcTM Control software before version 1.73.5335.2 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2023-25071: Use of NullPointerException Catch to Detect NULL Pointer Dereference

NULL pointer dereference in some IntelR ArcTM & IrisR Xe Graphics - WHQL - Windows Drviers before version 31.0.101.4255 may allow authenticated user to potentially enable denial of service via local access...

CVE-2023-28741: Buffer Copy without Checking Size of Input

Buffer overflow in some IntelR QAT drivers for Windows - HW Version 1.0 before version 1.10 may allow an authenticated user to potentially enable escalation of privilege via local access...