CVE-2023-39929

CVE-2023-39929 : Uncontrolled search path in LibVA components maintained by Intel could allow an authenticated local user to escalate privileges. Public docs (Nessus/OpenVAS/SUSE advisories) indicate the issue affects LibVA before version 2.20.0 and can lead to privilege escalation via local acce...

CVE-2023-43487

Intel CST software vulnerability CVE-2023-43487 affects CST versions prior to 2.1.10300 and is caused by improper access control that may allow an authenticated user to trigger a local-denial-of-service condition. Public sources in connected documents confirm the affected product/version and the ...

CVE-2023-40155

Intel CST software prior to version 2.1.10300 is affected by an uncontrolled search path issue that may allow an authenticated local user to escalate privileges. The vulnerability is tied to Intel CST (Context Sensing Technology) software and is addressed by updating to 2.1.10300 or later. Affect...

CVE-2023-45743

Intel® DSA software uninstaller (Intel Driver & Support Assistant) is affected by CVE-2023-45743 due to an uncontrolled search path flaw in uninstallers prior to version 23.4.39.10. The issue may permit an authenticated user to escalate privileges via local access. The advisory specifies affected...

CVE-2024-21814

CVE-2024-21814 affects Intel Chipset Device Software prior to 10.1.19444.8378. Root cause: an uncontrolled search path element that could let an authenticated local user escalate privileges. Impact: local privilege escalation is possible as described in Intel’s advisory INTEL-SA-01032 and corrobo...

CVE-2023-45320

CVE-2023-45320 affects Intel VTune Profiler prior to version 2024.0. The root cause is an uncontrolled search path element, allowing an authenticated, local attacker to elevate privileges. The vulnerability impact is described as escalation of privileges via local access. Intel’s advisory recomme...

CVE-2023-45745

CVE-2023-45745 (Intel TDX module) - details from connected Intel advisory : The issue is an improper input validation in Intel® Trust Domain Extensions (TDX) module software before version 1.5.05.46.698, which may allow a privileged local user to escalate privileges. Affected product: Intel TDX m...

CVE-2023-41234

CVE-2023-41234 is a NULL pointer dereference in Intel® Power Gadget software for Windows, affecting all versions prior to 3.6.0. An authenticated user may cause a local denial of service. The issue is documented with Intel’s advisory (Intel® Power Gadget Software Advisory) and the CVE entry lists...

CVE-2023-38420

Intel Power Gadget for macOS (all versions) is affected by CVE-2023-38420 due to an improper conditions check in the software, allowing an authenticated local user to potentially disclose information. The NVD/Intel advisory lists the affected scope and notes a Product Discontinuation Notice with ...

CVE-2023-45736

CVE-2023-45736 refers to insecure inherited permissions in Intel Power Gadget software for Windows (all versions) that may allow an authenticated user to escalate privileges via local access. Affected product: Intel® Power Gadget software for Windows prior to version 3.6.0. Root cause described a...

CVE-2023-46689

CVE-2023-46689 concerns the Intel Power Gadget software for macOS, affecting all versions, with an issue described as improper neutralization that may permit an authenticated user to escalate privileges via local access. The entry notes a local, low-attack-vector that requires no user interaction...

CVE-2023-40070

CVE-2023-40070 concerns Intel Power Gadget for macOS. The vulnerability is described as improper access control that could allow an authenticated local user to escalate privileges on all macOS versions. The related documents confirm the affected product is Intel Power Gadget software on macOS, wi...

CVE-2023-38417

CVE-2023-38417: Intel PROSet/Wireless WiFi software (pre-23.20) contains improper input validation that could allow an unauthenticated adjacent attacker to cause a denial of service. The CVSSv3.1 rating is 4.3 (Medium), with attack vector adjacent and no user interaction required. Remediation is ...

CVE-2023-47210

CVE-2023-47210 : Affects Intel PROSet/Wireless WiFi software for Linux prior to 23.20. Improper input validation may allow an unauthenticated user to potentially cause a Denial of Service via adjacent access. Intel’s advisory (Intel-SA-01039) and SUSE/NVD entries confirm the vulnerability and its...

CVE-2024-21841

Intel Distribution for GDB prior to version 2024.0 contains an uncontrolled search path vulnerability that may allow an authenticated local user to escalate privileges. Affected product: Intel Distribution for GDB. Root cause: uncontrolled search path in the software before 2024.0. Impact: potent...

CVE-2024-22379

CVE-2024-22379 affects Intel® Inspector software (and HPC Toolkit) prior to version 2024.0, due to an uncontrolled search path that could let an authenticated local user escalate privileges. Impact is local and requires user interaction; CVSS base metrics indicate a Medium severity with high impa...

CVE-2024-21772

CVE-2024-21772 describes an uncontrolled search path in Intel�a0Advisor software prior to version 2024.0 that could allow an authenticated user to escalate privileges via local access. Connected sources (Intel advisory and Red Hat/NVD entries) confirm the affected products are Intel�a0Advisor (an...

CVE-2024-22390

CVE-2024-22390 affects Intel FPGA firmware (Intel Agilex 7 and Stratix 10 FPGA/SoC FPGA families). Root cause: improper input validation in firmware prior to version 2.9.1, potentially allowing a denial of service. Exploitation is locally attainable with high privileges and no user interaction pe...

CVE-2023-49614

CVE-2023-49614 describes an out-of-bounds write in Intel FPGA firmware on certain Intel FPGA products prior to version 2.9.0, which may allow privilege escalation and information disclosure. Connected sources confirm the affected lineages include Intel FPGA firmware and recommend updating to vers...

CVE-2023-46103

CVE-2023-46103 describes a vulnerability in Intel Core Ultra Processors where a specific sequence of processor instructions can cause unexpected behavior, potentially enabling a denial-of-service condition for an authenticated local user. The issue is discussed across multiple connected documents...