CVE-2021-33157

CVE-2021-33157 affects Intel® Ethernet Adapters and Intel® Ethernet Controller I225 Manageability firmware, where insufficient control flow management could allow a privileged user to escalate privileges via local access. The base CVSSv3.1 score is 7.2 (HIGH) with LOCAL access, HIGH complexity, a...

CVE-2021-33162

CVE-2021-33162 : Improper access control in some Intel® Ethernet Adapters and Intel® Ethernet Controller I225 Manageability firmware may allow an authenticated local user to escalate privileges. The issue is documented by Intel in advisory Intel-SA-00756 and is rated high (CVSSv3.1 base 8.4). Aff...

CVE-2021-33141

The CVE-2021-33141 issue affects Intel® Ethernet Adapters and Intel® Ethernet Controller I225 Manageability firmware. The root cause is improper input validation in the firmware, which may allow an unauthenticated user to cause a denial of service via network access. The CVSS v3.1 base score is 8...

CVE-2023-28383

CVE-2023-28383 is described in Intel advisory INTEL-SA-00814 as an improper conditions check in Intel BIOS PPAM firmware that may allow a privileged user to escalate privileges via local access (local attack, high complexity). The CVSS 3.1 base shows AV:L, AC:H, PR:H, UI:N, with impact partially ...

CVE-2023-27504

The CVE-2023-27504 issue concerns Intel BIOS Guard firmware with an improper conditions check that could let a privileged local user escalate privileges. Across connected sources, the vulnerability is tied to Intel BIOS Guard and PPAM firmware, with a CVSS v3.1 base score of 7.2 (High) and local ...

CVE-2023-35192

CVE-2023-35192 concerns Intel GPA Framework (and Intel GPA software) prior to version 2023.3, where an uncontrolled search path may allow an authenticated local user to escalate privileges. The vulnerability is described in Intel’s advisory (Intel-SA-00831) and corresponds to a local-privilege-es...

CVE-2023-28402

The CVE-2023-28402 entry relates to Intel BIOS Guard firmware (and PPAM per Intel advisory) with improper input validation that could allow a privileged user to escalate privileges via local access. Affected are Intel BIOS Guard/PPAM firmware across multiple CPU generations; CVSSv3.1 base score 7...

CVE-2023-41961

CVE-2023-41961 affects Intel GPA software prior to 2023.3, where an uncontrolled search path could enable local-privilege escalation for an authenticated user. The issue is documented by Intel and reflected in multiple feeds; Intel- advisory INTEL-SA-00831 confirms affected products are Intel GPA...

CVE-2023-45221

CVE-2023-45221 is tied to Intel Media SDK; openSUSE/SUSE advisories show the issue being fixed in libmfx (SUSE-SU-2025:0050-1) for ffmpeg-related packages, with the patch addressing an improper buffer restriction vulnerability that could enable local privilege escalation. Affected products includ...

CVE-2023-48368

CVE-2023-48368 is an Intel Media SDK vulnerability described as improper input validation. The issue affects Intel Media SDK software in all versions and can allow a locally authenticated user to cause a denial of service. In the NVD assessment, CVSSv3.1 scores are around 5.5 (user impact: availa...

CVE-2023-43751

CVE-2023-43751 affects Intel Graphics Command Center Service bundled with Intel Graphics Windows DCH drivers prior to 31.0.101.3790/31.0.101.2114. The issue is an uncontrolled search path that could allow an authenticated local user to escalate privileges. Affected products: Intel Graphics Comman...

CVE-2023-42668

CVE-2023-42668 describes an “Incorrect default permissions” issue in onboard video driver software for Intel® Server Boards based on the Intel® 62X chipset, before version 1.14, potentially allowing an authenticated user to escalate privileges via local access. The CVSSv3.1 vector is AV:L/AC:H/PR...

CVE-2023-42433

The CVE-2023-42433 affects Endurance Gaming Mode software installers prior to version 1.3.937.0. Root cause: incorrect default permissions in the installers, enabling an authenticated local user to potentially escalate privileges. Impact: local privilege escalation with a base CVSS 3.1 score of 6...

CVE-2024-22015

The CVE-2024-22015 entry affects Intel® Dynamic Load Balancer (DLB) driver software prior to version 8.5.0. The root cause is improper input validation, which may allow an authenticated user to cause a denial of service via local access. The vulnerability is rated CVSS v3.1 base score 6.5 (Attack...

CVE-2023-39929

CVE-2023-39929 : Uncontrolled search path in LibVA components maintained by Intel could allow an authenticated local user to escalate privileges. Public docs (Nessus/OpenVAS/SUSE advisories) indicate the issue affects LibVA before version 2.20.0 and can lead to privilege escalation via local acce...

CVE-2023-43487

Intel CST software vulnerability CVE-2023-43487 affects CST versions prior to 2.1.10300 and is caused by improper access control that may allow an authenticated user to trigger a local-denial-of-service condition. Public sources in connected documents confirm the affected product/version and the ...

CVE-2023-40155

Intel CST software prior to version 2.1.10300 is affected by an uncontrolled search path issue that may allow an authenticated local user to escalate privileges. The vulnerability is tied to Intel CST (Context Sensing Technology) software and is addressed by updating to 2.1.10300 or later. Affect...

CVE-2023-45743

Intel® DSA software uninstaller (Intel Driver & Support Assistant) is affected by CVE-2023-45743 due to an uncontrolled search path flaw in uninstallers prior to version 23.4.39.10. The issue may permit an authenticated user to escalate privileges via local access. The advisory specifies affected...

CVE-2024-21814

CVE-2024-21814 affects Intel Chipset Device Software prior to 10.1.19444.8378. Root cause: an uncontrolled search path element that could let an authenticated local user escalate privileges. Impact: local privilege escalation is possible as described in Intel’s advisory INTEL-SA-01032 and corrobo...

CVE-2023-45320

CVE-2023-45320 affects Intel VTune Profiler prior to version 2024.0. The root cause is an uncontrolled search path element, allowing an authenticated, local attacker to elevate privileges. The vulnerability impact is described as escalation of privileges via local access. Intel’s advisory recomme...