31005 matches found
CVE-2025-20077
Missing release of memory after effective lifetime in the UEFI OobRasMmbiHandlerDriver module for some IntelR reference server platforms may allow a privileged user to enable denial of service via local access...
CVE-2025-20077
CVE-2025-20077 concerns a missing release of memory after the effective lifetime in the UEFI OobRasMmbiHandlerDriver module on some Intel® reference server platforms. Intel’s advisory (INTEL-SA-01300) states this could allow a privileged user to cause a denial of service via local access. The iss...
CVE-2025-20074
Time-of-check Time-of-use race condition for some IntelR Connectivity Performance Suite software installers before version 40.24.11210 may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2025-20074
Time-of-check Time-of-use race condition for some IntelR Connectivity Performance Suite software installers before version 40.24.11210 may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2025-20067
Observable timing discrepancy in firmware for some IntelR CSME and IntelR SPS may allow a privileged user to potentially enable information disclosure via local access...
CVE-2025-20067
Observable timing discrepancy in firmware for some IntelR CSME and IntelR SPS may allow a privileged user to potentially enable information disclosure via local access...
CVE-2025-20067
CVE-2025-20067 describes an observable timing discrepancy in firmware for Intel® CSME and Intel® SPS that may allow a privileged local attacker to disclose information. Connected sources confirm this as a firmware-level issue affecting Intel CSME/SPS (and related components in the Intel security ...
CVE-2025-20053
Improper buffer restrictions for some IntelR XeonR Processor firmware with SGX enabled may allow a privileged user to potentially enable escalation of privilege via local access...
CVE-2025-20053
Improper buffer restrictions for some IntelR XeonR Processor firmware with SGX enabled may allow a privileged user to potentially enable escalation of privilege via local access...
CVE-2025-20053
Improper buffer restrictions for some IntelR XeonR Processor firmware with SGX enabled may allow a privileged user to potentially enable escalation of privilege via local access...
CVE-2025-20053
Improper buffer restrictions for some IntelR XeonR Processor firmware with SGX enabled may allow a privileged user to potentially enable escalation of privilege via local access...
CVE-2025-20053
CVE-2025-20053 involves improper buffer restrictions in Intel Xeon processor firmware with SGX enabled, enabling local privilege escalation for a privileged user. Affected component is Intel Xeon processor firmware (SGX-enabled) and related microcode/microcode_ctl updates are common mitigation pa...
CVE-2025-20048
Uncontrolled search path for the IntelR Trace Analyzer and Collector software all verions may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2025-20048
Uncontrolled search path for the IntelR Trace Analyzer and Collector software all verions may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2025-20048
CVE-2025-20048 affects Intel® Trace Analyzer and Collector software (all versions). The vulnerability is an uncontrolled search path that could allow an authenticated, low-privilege user to escalate privileges via local access. Multiple sources (Intel advisory INTEL-SA-01266 and Nessus/NVD refere...
CVE-2025-20037
Time-of-check time-of-use race condition in firmware for some IntelR Converged Security and Management Engine may allow a privileged user to potentially enable escalation of privilege via local access...
CVE-2025-20025
Uncontrolled recursion for some TinyCBOR libraries maintained by IntelR before version 0.6.1 may allow an authenticated user to potentially enable denial of service via local access...
CVE-2025-20025
CVE-2025-20025 concerns the TinyCBOR library maintained by Intel. Affected are TinyCBOR builds before version 0.6.1, where uncontrolled recursion may allow an authenticated local user to cause a denial of service. Documented impact includes potential resource exhaustion and system crash; CVSS met...