CVE-2025-27710

The CVE-2025-27710 entry concerns Intel QAT Windows software prior to version 2.6.0, where an untrusted pointer dereference in Ring 3 user applications can lead to information disclosure. The issue originates from a local access scenario with user authentication and low attack complexity, and no ...

CVE-2025-27710

Untrusted pointer dereference for some IntelR QAT Windows software before version 2.6.0. within Ring 3: User Applications may allow an information disclosure. System software adversary with an authenticated user combined with a low complexity attack may enable data exposure. This result may...

CVE-2025-27710

Untrusted pointer dereference for some IntelR QAT Windows software before version 2.6.0. within Ring 3: User Applications may allow an information disclosure. System software adversary with an authenticated user combined with a low complexity attack may enable data exposure. This result may...

CVE-2025-27249

CVE-2025-27249 affects Intel Gaudi software prior to version 1.21.0. A resource-management error can allow an authenticated, locally present user with a low-complexity attack to trigger a denial of service, impacting availability (high) with no confidentiality or integrity impact. Remediation: up...

CVE-2025-26694

Null pointer dereference for some IntelR QAT Windows software before version 2.6.0. within Ring 3: User Applications may allow a denial of service. System software adversary with an authenticated user combined with a low complexity attack may enable denial of service. This result may potentially...

CVE-2025-26694

Intel QAT Windows software prior to version 2.6.0 contains a null pointer dereference vulnerability that can be exploited to cause a denial of service. The issue affects Ring 3 (User Applications) and can be triggered by a locally authenticated user with low attack complexity and no user interact...

CVE-2025-26694

Null pointer dereference for some IntelR QAT Windows software before version 2.6.0. within Ring 3: User Applications may allow a denial of service. System software adversary with an authenticated user combined with a low complexity attack may enable denial of service. This result may potentially...

CVE-2025-26405

Improper control of dynamically-managed code resources for some IntelR NPU Drivers within Ring 3: User Applications may allow a denial of service. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable denial of service. This result may...

CVE-2025-26405

Improper control of dynamically-managed code resources for some IntelR NPU Drivers within Ring 3: User Applications may allow a denial of service. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable denial of service. This result may...

CVE-2025-26402

Protection mechanism failure for some IntelR NPU Drivers within Ring 3: User Applications may allow a denial of service. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via local acces...

CVE-2025-26402

Protection mechanism failure for some IntelR NPU Drivers within Ring 3: User Applications may allow a denial of service. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via local acces...

CVE-2025-26402

The CVE-2025-26402 issue is a protection mechanism failure affecting Intel® NPU Drivers in Ring 3 (Linux and Windows). The vulnerability allows a local, low-privilege attacker with authenticated access and no user interaction to cause a denial of service, with high impact on availability and no i...

CVE-2025-25216

Improper input validation in some firmware for some IntelR Graphics Drivers and Intel LTS kernels within Ring 1: Device Drivers may allow a denial of service. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable denial of service. This result...

CVE-2025-25216

Improper input validation in some firmware for some IntelR Graphics Drivers and Intel LTS kernels within Ring 1: Device Drivers may allow a denial of service. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable denial of service. This result...

CVE-2025-25059

Uncontrolled search path for some IntelR One Boot Flash Update IntelR OFU software before version 14.1.31 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable escalation ...

CVE-2025-25059

Intel OFU (One Boot Flash Update) software prior to version 14.1.31 is affected by an Uncontrolled search path issue that could enable local privilege escalation for Ring 3 user applications. An unprivileged, authenticated user with high complexity and active user interaction may leverage this to...

CVE-2025-24848

Protection mechanism failure for some IntelR CIP software before version WINDCA2.4.0.11001 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with a privileged user combined with a high complexity attack may enable escalation of privilege. This...

CVE-2025-24848

Protection mechanism failure for some IntelR CIP software before version WINDCA2.4.0.11001 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with a privileged user combined with a high complexity attack may enable escalation of privilege. This...

CVE-2025-24848

Intel CIP software prior to WIN_DCA_2.4.0.11001 suffers a protection mechanism failure in Ring 3 (User Applications) that may allow an Elevation of Privilege by a local attacker with privileged user context and high attack complexity. Affected products are Intel® CIP software before WIN_DCA_2.4.0...

CVE-2025-24519

Buffer overflow for some IntelR QAT Windows software before version 2.6.0. within Ring 3: User Applications may allow an escalation of privilege. System software adversary with an authenticated user combined with a low complexity attack may enable data manipulation. This result may potentially...