CVE-2025-20031

CVE-2025-20031 describes improper input validation in Intel® Graphics Drivers that may let an authenticated local attacker cause a denial of service. Affected products include Intel® Arc™, Arc™ Pro, Iris® Xe and Data Center GPU Flex Series drivers, plus older Core/Atom lines, with multiple versio...

CVE-2025-20031

Improper input validation for some IntelR Graphics Drivers may allow an authenticated user to potentially enable denial of service via local access...

CVE-2025-20018

CVE-2025-20018 corresponds to an elevation of privilege vulnerability in Intel Graphics Drivers caused by an untrusted pointer dereference. Affected products include Intel® Arc™, Iris Xe, and related drivers across Arc Pro, Data Center GPU Flex, and newer CPU generations. The impact is local esca...

CVE-2025-20015

Uncontrolled search path element for some IntelR Ethernet Connection software before version 29.4 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2025-20015

Uncontrolled search path element for some IntelR Ethernet Connection software before version 29.4 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2025-20015

CVE-2025-20015 affects Intel® Ethernet Connections Boot Utility before version 29.4. The vulnerability is an uncontrolled search path element that could allow an authenticated, local user to escalate privileges. Intel’s advisory INTEL-SA-01294 describes vulnerable versions prior to 29.4 and recom...

CVE-2025-20009

The Intel advisory INTEL-SA-01269 documents CVE-2025-20009 (and related CVEs) affecting Intel Server Board D50DNP and M50FCP. It describes improper input validation in the UEFI firmware GenerationSetup module that could allow a privileged user to disclose information via local access. A remediati...

CVE-2025-20008

Insecure inherited permissions for some IntelR SimicsR Package Manager software before version 1.12.0 may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2025-20008

Insecure inherited permissions for some IntelR SimicsR Package Manager software before version 1.12.0 may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2025-20008

Intel® Simics® Package Manager before version 1.12.0 has insecure inherited permissions that may allow a privileged local user to escalate privileges. The issue is acknowledged in Intel’s advisory (Intel® Simics® Package Manager Software Advisory) and CVSS data indicate high impact for local esca...

CVE-2025-20004

CVE-2025-20004 affects Intel Xeon 6 Processor E-Cores firmware through the Alias Checking Trusted Module due to insufficient control-flow management, enabling privilege escalation from local access. Risk context is High (CVSS 3.1/4.0; local access, high privileges). Intel Intel-SA-01273 documents...

CVE-2025-20004

Insufficient control flow management in the Alias Checking Trusted Module for some IntelR XeonR 6 processor E-Cores firmware may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2025-20003

CVE-2025-20003 describes a local privilege-escalation in Intel Graphics Driver installers due to improper link resolution before file access (Link Following). Affected products include Intel® Graphics Drivers for Arc, Arc Pro, Data Center GPU Flex, and Iris Xe, plus older Core/Atom families; root...

CVE-2025-20003

Improper link resolution before file access 'Link Following' for some IntelR Graphics Driver software installers may allow an authenticated user to potentially enable escalation of privilege via local access...

Vulnerabilities fixed in Microsoft Defender

Microsoft has fixed vulnerabilities in Defender for Endpoint and Defender for Identity. A malicious party could exploit the vulnerabilities to impersonate another user and assign themselves elevated privileges, enabling execution of arbitrary code with SYSTEM privileges. For successful...

CVE-2025-29976

Improper privilege management in Microsoft Office SharePoint allows an authorized attacker to elevate privileges locally...

CVE-2025-29975

Improper link resolution before file access 'link following' in Microsoft PC Manager allows an authorized attacker to elevate privileges locally...

CVE-2025-24063

Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally...

microcode_ctl: Insufficient granularity of access control in UEFI firmware

Insufficient granularity of access control in UEFI firmware in some IntelR processors may allow a authenticated user to potentially enable denial of service via local access...

CVE-2025-4532

A vulnerability classified as critical has been found in Shanghai Bairui Information Technology SunloginClient 15.8.3.19819. This affects an unknown part in the library process.dll of the file sunloginguard.exe. The manipulation leads to uncontrolled search path. Local access is required to...