CVE-2025-20067

CVE-2025-20067 describes an observable timing discrepancy in firmware for Intel® CSME and Intel® SPS that may allow a privileged local attacker to disclose information. Connected sources confirm this as a firmware-level issue affecting Intel CSME/SPS (and related components in the Intel security ...

CVE-2025-20053

Improper buffer restrictions for some IntelR XeonR Processor firmware with SGX enabled may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2025-20053

Improper buffer restrictions for some IntelR XeonR Processor firmware with SGX enabled may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2025-20053

Improper buffer restrictions for some IntelR XeonR Processor firmware with SGX enabled may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2025-20053

Improper buffer restrictions for some IntelR XeonR Processor firmware with SGX enabled may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2025-20053

CVE-2025-20053 involves improper buffer restrictions in Intel Xeon processor firmware with SGX enabled, enabling local privilege escalation for a privileged user. Affected component is Intel Xeon processor firmware (SGX-enabled) and related microcode/microcode_ctl updates are common mitigation pa...

CVE-2025-20048

Uncontrolled search path for the IntelR Trace Analyzer and Collector software all verions may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2025-20048

CVE-2025-20048 affects Intel® Trace Analyzer and Collector software (all versions). The vulnerability is an uncontrolled search path that could allow an authenticated, low-privilege user to escalate privileges via local access. Multiple sources (Intel advisory INTEL-SA-01266 and Nessus/NVD refere...

CVE-2025-20048

Uncontrolled search path for the IntelR Trace Analyzer and Collector software all verions may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2025-20037

Time-of-check time-of-use race condition in firmware for some IntelR Converged Security and Management Engine may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2025-20025

Uncontrolled recursion for some TinyCBOR libraries maintained by IntelR before version 0.6.1 may allow an authenticated user to potentially enable denial of service via local access...

CVE-2025-20025

CVE-2025-20025 concerns the TinyCBOR library maintained by Intel. Affected are TinyCBOR builds before version 0.6.1, where uncontrolled recursion may allow an authenticated local user to cause a denial of service. Documented impact includes potential resource exhaustion and system crash; CVSS met...

CVE-2025-20025

Uncontrolled recursion for some TinyCBOR libraries maintained by IntelR before version 0.6.1 may allow an authenticated user to potentially enable denial of service via local access...

CVE-2025-20023

CVE-2025-20023 affects Intel Graphics Driver installers, where incorrect default permissions may allow an authenticated local user to escalate privileges. Affected products include Intel\u00a0Graphics Drivers for Arc, Iris Xe, Pro, Data Center GPU Flex, and related processors; root cause is impro...

CVE-2025-20023

Incorrect default permissions for some IntelR Graphics Driver software installers may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2025-20023

Incorrect default permissions for some IntelR Graphics Driver software installers may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2025-20017

Intel’s CVE-2025-20017 describes an uncontrolled search path vulnerability in some Intel® oneAPI Toolkit and component software installers that could enable privilege escalation via local access for an authenticated user. The issue is discussed in the Intel advisory and is grouped with other rela...

CVE-2025-20017

Uncontrolled search path for some IntelR oneAPI Toolkit and component software installers may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2025-20017

Uncontrolled search path for some IntelR oneAPI Toolkit and component software installers may allow an authenticated user to potentially enable escalation of privilege via local access...

MAL-2025-6825 Malicious code in intel-quantum-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis fa156b1cde9820ee0b03c5c4a594de333baa592c69177eb84a7c8ddf13963208 The OpenSSF Package Analysis project identified 'intel-quantum-sdk' @ 1.5.1 npm as malicious. It is considered malicious because: - The package...