CVE-2025-20048

CVE-2025-20048 affects Intel® Trace Analyzer and Collector software (all versions). The vulnerability is an uncontrolled search path that could allow an authenticated, low-privilege user to escalate privileges via local access. Multiple sources (Intel advisory INTEL-SA-01266 and Nessus/NVD refere...

CVE-2025-20048

Uncontrolled search path for the IntelR Trace Analyzer and Collector software all verions may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2025-20037

Time-of-check time-of-use race condition in firmware for some IntelR Converged Security and Management Engine may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2025-20025

CVE-2025-20025 concerns the TinyCBOR library maintained by Intel. Affected are TinyCBOR builds before version 0.6.1, where uncontrolled recursion may allow an authenticated local user to cause a denial of service. Documented impact includes potential resource exhaustion and system crash; CVSS met...

CVE-2025-20025

Uncontrolled recursion for some TinyCBOR libraries maintained by IntelR before version 0.6.1 may allow an authenticated user to potentially enable denial of service via local access...

CVE-2025-20025

Uncontrolled recursion for some TinyCBOR libraries maintained by IntelR before version 0.6.1 may allow an authenticated user to potentially enable denial of service via local access...

CVE-2025-20023

Incorrect default permissions for some IntelR Graphics Driver software installers may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2025-20023

CVE-2025-20023 affects Intel Graphics Driver installers, where incorrect default permissions may allow an authenticated local user to escalate privileges. Affected products include Intel\u00a0Graphics Drivers for Arc, Iris Xe, Pro, Data Center GPU Flex, and related processors; root cause is impro...

CVE-2025-20023

Incorrect default permissions for some IntelR Graphics Driver software installers may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2025-20017

Uncontrolled search path for some IntelR oneAPI Toolkit and component software installers may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2025-20017

Intel’s CVE-2025-20017 describes an uncontrolled search path vulnerability in some Intel® oneAPI Toolkit and component software installers that could enable privilege escalation via local access for an authenticated user. The issue is discussed in the Intel advisory and is grouped with other rela...

CVE-2025-20017

Uncontrolled search path for some IntelR oneAPI Toolkit and component software installers may allow an authenticated user to potentially enable escalation of privilege via local access...

MAL-2025-6825 Malicious code in intel-quantum-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis fa156b1cde9820ee0b03c5c4a594de333baa592c69177eb84a7c8ddf13963208 The OpenSSF Package Analysis project identified 'intel-quantum-sdk' @ 1.5.1 npm as malicious. It is considered malicious because: - The package...

PT-2025-32726 · Intel · Intel Device Plugins For Kubernetes

Name of the Vulnerable Software and Affected Versions: Intel Device Plugins for Kubernetes versions prior to 0.32.0 Description: Improper access control in certain Device Plugins for Kubernetes software maintained by Intel may allow a privileged user to potentially cause a denial of service via...

PT-2025-32722 · Intel · Intel E810 Ethernet

Name of the Vulnerable Software and Affected Versions: IntelR E810 Ethernet versions prior to 4.6 Description: Improper input validation in the firmware may allow a privileged user to enable a denial of service via local access. Recommendations: Update the firmware to version 4.6 or later...

PT-2025-32695

Name of the Vulnerable Software and Affected Versions: IntelR Converged Security and Management Engine affected versions not specified Description: A time-of-check time-of-use TOCTOU race condition exists in the firmware. This may allow a privileged user to potentially escalate privileges via loc...

PT-2025-32743 · Intel · Intel 700 Series Ethernet

Name of the Vulnerable Software and Affected Versions: IntelR 700 Series Ethernet versions prior to 2.28.5 Description: Insufficient control flow management exists in the Linux kernel-mode driver for some IntelR 700 Series Ethernet. This issue may allow an authenticated user to potentially escala...

PT-2025-32700 · Intel · Intel Reference Server Platforms +1

Name of the Vulnerable Software and Affected Versions: IntelR reference server platforms affected versions not specified Description: A missing release of memory after its effective lifetime within the UEFI OobRasMmbiHandlerDriver module may allow a privileged user to enable a denial of service v...

Intel 800 Series Ethernet input validation error vulnerability

Intel 800 Series Ethernet is a new generation of high-speed Ethernet technology from Intel that supports 25GbE and 100GbE speeds and is backward compatible with 10GbE. Intel 800 Series Ethernet suffers from an integer overflow vulnerability that originates from an integer overflow or wrap-around...

Intel Xeon 6 Scalable processors security vulnerabilities

Intel Xeon 6 Scalable processors is a processor from Intel Corporation USA. A security vulnerability exists in Intel Xeon 6 Scalable processors that stems from insufficient access control granularity, which could lead to elevation of privilege...