2025.2 IPU, Intel® Processor Stream Cache Advisory

Summary: A potential security vulnerability in some Intel® Processor stream cache mechanisms may allow escalation of privilege. Intel is releasing microcode updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2025-20109 Description: Improper Isolation or...

Intel® E810 Ethernet Firmware Advisory

Summary: A potential security vulnerability for the Intel® E810 Ethernet may allow denial of service. Intel is releasing firmware updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2025-24296 Description: Improper input validation in some firmware for the Intel®...

TinyCBOR Library Advisory

Summary: Potential security vulnerabilities in the TinyCBOR library maintained by Intel® may allow elevation of privilege or denial of service. Intel is releasing software updates to mitigate these potential vulnerabilities . Vulnerability Details: CVEID: CVE-2025-24302 Description: Uncontrolled...

PT-2025-32862 · Intel · Intel Tdx Module

Name of the Vulnerable Software and Affected Versions: IntelR TDX Module firmware versions prior to 1.5.13 Description: Improper locking in some IntelR TDX Module firmware versions may allow a privileged user to potentially escalate privileges via local access. Recommendations: Update to IntelR T...

PT-2025-32694 · Intel · Tinycbor

Name of the Vulnerable Software and Affected Versions: TinyCBOR versions prior to 0.6.1 Description: An uncontrolled recursion issue in some TinyCBOR libraries maintained by IntelR before version 0.6.1 may allow an authenticated user to potentially enable denial of service via local access...

PT-2025-32756 · Intel · Intel Sgx Sdk +1

Name of the Vulnerable Software and Affected Versions: Intel Edger8r Tool for some IntelR SGX SDK affected versions not specified Description: Improper input validation in the Intel Edger8r Tool for some IntelR SGX SDK may allow an authenticated user to potentially escalate privileges via local...

PT-2025-32725

Name of the Vulnerable Software and Affected Versions: IntelR XeonR processors affected versions not specified Description: Insufficient control flow management in the Alias Checking Trusted Module ACTM firmware may allow a privileged user to potentially enable escalation of privilege via local...

PT-2025-32717

Name of the Vulnerable Software and Affected Versions: IntelR XeonR 6 Scalable processors affected versions not specified Description: A sequence of processor instructions can lead to unexpected behavior in some IntelR XeonR 6 Scalable processors. This may allow an authenticated user to potential...

PT-2025-32695

Name of the Vulnerable Software and Affected Versions: IntelR Converged Security and Management Engine affected versions not specified Description: A time-of-check time-of-use TOCTOU race condition exists in the firmware. This may allow a privileged user to potentially escalate privileges via loc...

PT-2025-43484

Name of the Vulnerable Software and Affected Versions versions prior to 2025-48600 Description A missing permission check in multiple files may allow information disclosure across users. Exploitation does not require additional execution privileges or user interaction. This could lead to local...

PT-2025-32693 · Intel · Intel Graphics Driver

Name of the Vulnerable Software and Affected Versions: IntelR Graphics Driver software installers affected versions not specified Description: Incorrect default permissions in some IntelR Graphics Driver software installers may allow an authenticated user to potentially escalate privileges via...

Linux Distros Unpatched Vulnerability : CVE-2020-8428

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fs/namei.c in the Linux kernel before 5.5 has a maycreateinsticky use-after-free, which allows local users to cause a denial of service OOPS or possibly obtain...

Intel® Graphics Advisory

Summary: Potential security vulnerabilities for some Intel® Graphics software may allow escalation of privilege or denial of service. Intel is releasing software updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2025-20023 Description: Incorrect default...

Intel® Rapid Storage Technology Software Advisory

Summary: A potential security vulnerability for Intel® Rapid Storage Technology installation software may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2025-20099 Description: Improper access control...

PT-2025-32724 · Intel · Intel 800 Series Ethernet

Name of the Vulnerable Software and Affected Versions: IntelR 800 Series Ethernet versions prior to 1.17.2 Description: An improper check for unusual or exceptional conditions exists in the Linux kernel-mode driver. This may allow an authenticated user to potentially escalate privileges via local...

PT-2025-32672 · Ami · Ami Aptiov

Name of the Vulnerable Software and Affected Versions: AMI APTIOV affected versions not specified Description: AMI APTIOV BIOS contains a flaw that allows a local user to cause an “Improper Initialization” condition. Successful exploitation may result in an unexpected system state, potentially...

PT-2025-32752 · Unknown · Ai Playground

Name of the Vulnerable Software and Affected Versions: AI Playground versions prior to 2.3.0 alpha Description: Incorrect default permissions in some AI Playground software versions prior to v2.3.0 alpha may allow an authenticated user to potentially escalate privileges via local access...

PT-2025-32715 · Intel · Intel Realsense Dynamic Calibration

Name of the Vulnerable Software and Affected Versions: IntelR RealSenseTM Dynamic Calibrator versions prior to 2.14.2.0 Description: An uncontrolled search path issue exists in some IntelR RealSenseTM Dynamic Calibrator software. An authenticated user may be able to escalate privileges via local...

PT-2025-32696 · Intel · Intel Trace Analyzer/Collector

Name of the Vulnerable Software and Affected Versions: IntelR Trace Analyzer and Collector software affected versions not specified Description: An uncontrolled search path issue exists in the IntelR Trace Analyzer and Collector software. This may allow an authenticated user to potentially escala...

PT-2025-32671 · American Megatrends · Aptiov

Name of the Vulnerable Software and Affected Versions: APTIOV affected versions not specified Description: APTIOV BIOS contains a vulnerability where a skilled user with local access may cause a “Race Condition”. Successful exploitation may lead to resource exhaustion, impacting confidentiality,...