CVE-2024-42405

The CVE-2024-42405 issue affects Intel® Quartus® Prime Software prior to 23.1.1 Patch 1.01std, with an underlying root cause of an Uncontrolled search path. This could allow an authenticated user to potentially escalate privileges via local access. The advisory and related documents specify affec...

CVE-2024-36283

Uncontrolled search path for the IntelR Thread Director Visualizer software before version 1.0.1 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-32941

NULL pointer dereference for some IntelR MLC software before version v3.11b may allow an authenticated user to potentially enable denial of service via local access...

CVE-2024-32941

CVE-2024-32941 concerns Intel® Memory Latency Checker (Intel® MLC) software prior to v3.11b. A NULL pointer dereference in this component could allow an authenticated local user to cause a denial of service. The vulnerability is tied to the Intel MLC software before version v3.11b, with the impac...

CVE-2024-39805

Insufficient verification of data authenticity in some IntelR DSA software before version 23.4.39 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-39805

Intel® DSA software prior to version 23.4.39 is affected by insufficient verification of data authenticity, which may allow an authenticated user to escalate privileges via local access. Affected product: Intel® Driver Support Assistant (DSA) software before 23.4.39. Root cause: data authenticity...

CVE-2024-36280

Uncontrolled search path for some IntelR High Level Synthesis Compiler software before version 24.2 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-36280

Uncontrolled search path for some IntelR High Level Synthesis Compiler software before version 24.2 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-36280

CVE-2024-36280 affects Intel® High Level Synthesis Compiler software before version 24.2. The vulnerability is an uncontrolled search path issue in the compiler, which could allow an authenticated local attacker to escalate privileges. Affected product: Intel® High Level Synthesis Compiler prior ...

CVE-2024-39372

Intel® XTU software for Windows is affected by CVE-2024-39372 due to an uncontrolled search path, potentially allowing an authenticated user to escalate privileges via local access. The issue affects versions prior to 7.14.2.14. Mitigation: update Intel® XTU to version 7.14.2.14 or later. Referen...

CVE-2023-31276

Heap-based buffer overflow in BMC Firmware for the IntelR Server Board S2600WF, IntelR Server Board S2600ST, IntelR Server Board S2600BP, before version 02.01.0017 and IntelR Server Board M50CYP and IntelR Server Board D50TNP before version R01.01.0009 may allow a privileged user to enable...

CVE-2024-39355

CVE-2024-39355 concerns Intel processors and is described as an improper handling of physical/environmental conditions that could let an authenticated user cause a denial of service via local access. The CVE lists LOCAL attack vector, LOW privileges required, and NO user interaction, with MEDIUM ...

CVE-2024-39355

Improper handling of physical or environmental conditions in some IntelR Processors may allow an authenticated user to enable denial of service via local access...

CVE-2024-39355

Improper handling of physical or environmental conditions in some IntelR Processors may allow an authenticated user to enable denial of service via local access...

CVE-2024-39355

Improper handling of physical or environmental conditions in some IntelR Processors may allow an authenticated user to enable denial of service via local access...

CVE-2024-39355

Improper handling of physical or environmental conditions in some IntelR Processors may allow an authenticated user to enable denial of service via local access...

CVE-2024-25571

CVE-2024-25571 affects Intel® Server Platform Services (SPS) firmware. Reported as an improper input validation in SPS firmware before SPS_E5_06.01.04.059.0, potentially allowing a privileged local attacker to cause a denial of service. Documents list the vulnerability details and the available m...

CVE-2024-25571

Improper input validation in some IntelR SPS firmware before SPSE506.01.04.059.0 may allow a privileged user to potentially enable denial of service via local access...

CVE-2024-28047

CVE-2024-28047 concerns improper input validation in UEFI firmware for some Intel processors, enabling a privileged local user to potentially disclose information. Multiple connected sources confirm the root cause is UEFI input validation weakness and the impact is information disclosure via loca...

CVE-2024-31157

CVE-2024-31157 is an Intel UEFI firmware OutOfBandXML module initialization vulnerability that may enable information disclosure via local access on affected Intel processors. The issue is documented across multiple sources (e.g., Debian LTS DLA-4095-1, AlmaLinux ALSA-2025-7043, and vendor adviso...