CVE-2024-30060

The connected PT-2024-3939 advisory identifies Microsoft Azure Monitor Agent as affected. Root cause is an incorrect reference count before accessing a file, enabling privilege escalation via a specially crafted link. Affected versions are not specified, and there is no information about a fix in...

CVE-2021-33146

Mode C: CVE-2021-33146 affects Intel Ethernet Adapters and Intel Ethernet Controller I225 Manageability firmware. The core issue is improper input validation that may allow an unauthenticated user to disclose information over the network. Public references indicate affected firmware prior to NVM ...

CVE-2021-33142

Summary: CVE-2021-33142 affects Intel® Ethernet Adapters and Intel® Ethernet Controller I225 Manageability firmware. The common issue is improper input validation in the firmware, which may allow a privileged user to cause a denial of service via local access. Connections across sources (Intel ad...

CVE-2021-33158

CVE-2021-33158 affects Intel Ethernet Adapters and the Intel Ethernet Controller I225 Manageability firmware. Affected: Intel Ethernet Controller I225 Manageability firmware prior to NVM 1.87 and Intel Ethernet Adapters prior to version 29.0.1. Description from Intel advisory: improper neutraliza...

CVE-2021-33145

CVE-2021-33145 refers to an uncaught exception in Intel® Ethernet Adapters and Intel® Ethernet Controller I225 Manageability firmware that may allow a privileged local escalation. Red Hat and Intel advisories corroborate the same description, with affected products including Intel® Ethernet Contr...

CVE-2021-33161

The CVE-2021-33161 issue concerns improper input validation in Intel Ethernet Adapters and Intel Ethernet Controller I225 Manageability firmware, enabling a privileged user to escalate privileges via local access. Affected products include Intel Ethernet Controller I225 Manageability firmware (be...

CVE-2021-33157

CVE-2021-33157 affects Intel® Ethernet Adapters and Intel® Ethernet Controller I225 Manageability firmware, where insufficient control flow management could allow a privileged user to escalate privileges via local access. The base CVSSv3.1 score is 7.2 (HIGH) with LOCAL access, HIGH complexity, a...

CVE-2021-33162

CVE-2021-33162 : Improper access control in some Intel® Ethernet Adapters and Intel® Ethernet Controller I225 Manageability firmware may allow an authenticated local user to escalate privileges. The issue is documented by Intel in advisory Intel-SA-00756 and is rated high (CVSSv3.1 base 8.4). Aff...

CVE-2021-33141

The CVE-2021-33141 issue affects Intel® Ethernet Adapters and Intel® Ethernet Controller I225 Manageability firmware. The root cause is improper input validation in the firmware, which may allow an unauthenticated user to cause a denial of service via network access. The CVSS v3.1 base score is 8...

CVE-2023-28383

CVE-2023-28383 is described in Intel advisory INTEL-SA-00814 as an improper conditions check in Intel BIOS PPAM firmware that may allow a privileged user to escalate privileges via local access (local attack, high complexity). The CVSS 3.1 base shows AV:L, AC:H, PR:H, UI:N, with impact partially ...

CVE-2023-27504

The CVE-2023-27504 issue concerns Intel BIOS Guard firmware with an improper conditions check that could let a privileged local user escalate privileges. Across connected sources, the vulnerability is tied to Intel BIOS Guard and PPAM firmware, with a CVSS v3.1 base score of 7.2 (High) and local ...

CVE-2023-35192

CVE-2023-35192 concerns Intel GPA Framework (and Intel GPA software) prior to version 2023.3, where an uncontrolled search path may allow an authenticated local user to escalate privileges. The vulnerability is described in Intel’s advisory (Intel-SA-00831) and corresponds to a local-privilege-es...

CVE-2023-28402

The CVE-2023-28402 entry relates to Intel BIOS Guard firmware (and PPAM per Intel advisory) with improper input validation that could allow a privileged user to escalate privileges via local access. Affected are Intel BIOS Guard/PPAM firmware across multiple CPU generations; CVSSv3.1 base score 7...

CVE-2023-41961

CVE-2023-41961 affects Intel GPA software prior to 2023.3, where an uncontrolled search path could enable local-privilege escalation for an authenticated user. The issue is documented by Intel and reflected in multiple feeds; Intel- advisory INTEL-SA-00831 confirms affected products are Intel GPA...

CVE-2023-48368

CVE-2023-48368 is an Intel Media SDK vulnerability described as improper input validation. The issue affects Intel Media SDK software in all versions and can allow a locally authenticated user to cause a denial of service. In the NVD assessment, CVSSv3.1 scores are around 5.5 (user impact: availa...

CVE-2023-45221

CVE-2023-45221 is tied to Intel Media SDK; openSUSE/SUSE advisories show the issue being fixed in libmfx (SUSE-SU-2025:0050-1) for ffmpeg-related packages, with the patch addressing an improper buffer restriction vulnerability that could enable local privilege escalation. Affected products includ...

CVE-2023-43751

CVE-2023-43751 affects Intel Graphics Command Center Service bundled with Intel Graphics Windows DCH drivers prior to 31.0.101.3790/31.0.101.2114. The issue is an uncontrolled search path that could allow an authenticated local user to escalate privileges. Affected products: Intel Graphics Comman...

CVE-2023-42668

CVE-2023-42668 describes an “Incorrect default permissions” issue in onboard video driver software for Intel® Server Boards based on the Intel® 62X chipset, before version 1.14, potentially allowing an authenticated user to escalate privileges via local access. The CVSSv3.1 vector is AV:L/AC:H/PR...

CVE-2023-42433

The CVE-2023-42433 affects Endurance Gaming Mode software installers prior to version 1.3.937.0. Root cause: incorrect default permissions in the installers, enabling an authenticated local user to potentially escalate privileges. Impact: local privilege escalation with a base CVSS 3.1 score of 6...

CVE-2024-22015

The CVE-2024-22015 entry affects Intel® Dynamic Load Balancer (DLB) driver software prior to version 8.5.0. The root cause is improper input validation, which may allow an authenticated user to cause a denial of service via local access. The vulnerability is rated CVSS v3.1 base score 6.5 (Attack...