CVE-2023-45745

CVE-2023-45745 (Intel TDX module) - details from connected Intel advisory : The issue is an improper input validation in Intel® Trust Domain Extensions (TDX) module software before version 1.5.05.46.698, which may allow a privileged local user to escalate privileges. Affected product: Intel TDX m...

CVE-2023-41234

CVE-2023-41234 is a NULL pointer dereference in Intel® Power Gadget software for Windows, affecting all versions prior to 3.6.0. An authenticated user may cause a local denial of service. The issue is documented with Intel’s advisory (Intel® Power Gadget Software Advisory) and the CVE entry lists...

CVE-2023-38420

Intel Power Gadget for macOS (all versions) is affected by CVE-2023-38420 due to an improper conditions check in the software, allowing an authenticated local user to potentially disclose information. The NVD/Intel advisory lists the affected scope and notes a Product Discontinuation Notice with ...

CVE-2023-45736

CVE-2023-45736 refers to insecure inherited permissions in Intel Power Gadget software for Windows (all versions) that may allow an authenticated user to escalate privileges via local access. Affected product: Intel® Power Gadget software for Windows prior to version 3.6.0. Root cause described a...

CVE-2023-46689

CVE-2023-46689 concerns the Intel Power Gadget software for macOS, affecting all versions, with an issue described as improper neutralization that may permit an authenticated user to escalate privileges via local access. The entry notes a local, low-attack-vector that requires no user interaction...

CVE-2023-40070

CVE-2023-40070 concerns Intel Power Gadget for macOS. The vulnerability is described as improper access control that could allow an authenticated local user to escalate privileges on all macOS versions. The related documents confirm the affected product is Intel Power Gadget software on macOS, wi...

CVE-2023-38417

CVE-2023-38417: Intel PROSet/Wireless WiFi software (pre-23.20) contains improper input validation that could allow an unauthenticated adjacent attacker to cause a denial of service. The CVSSv3.1 rating is 4.3 (Medium), with attack vector adjacent and no user interaction required. Remediation is ...

CVE-2023-47210

CVE-2023-47210 : Affects Intel PROSet/Wireless WiFi software for Linux prior to 23.20. Improper input validation may allow an unauthenticated user to potentially cause a Denial of Service via adjacent access. Intel’s advisory (Intel-SA-01039) and SUSE/NVD entries confirm the vulnerability and its...

CVE-2024-21841

Intel Distribution for GDB prior to version 2024.0 contains an uncontrolled search path vulnerability that may allow an authenticated local user to escalate privileges. Affected product: Intel Distribution for GDB. Root cause: uncontrolled search path in the software before 2024.0. Impact: potent...

CVE-2024-22379

CVE-2024-22379 affects Intel® Inspector software (and HPC Toolkit) prior to version 2024.0, due to an uncontrolled search path that could let an authenticated local user escalate privileges. Impact is local and requires user interaction; CVSS base metrics indicate a Medium severity with high impa...

CVE-2024-21772

CVE-2024-21772 describes an uncontrolled search path in Intel�a0Advisor software prior to version 2024.0 that could allow an authenticated user to escalate privileges via local access. Connected sources (Intel advisory and Red Hat/NVD entries) confirm the affected products are Intel�a0Advisor (an...

CVE-2024-22390

CVE-2024-22390 affects Intel FPGA firmware (Intel Agilex 7 and Stratix 10 FPGA/SoC FPGA families). Root cause: improper input validation in firmware prior to version 2.9.1, potentially allowing a denial of service. Exploitation is locally attainable with high privileges and no user interaction pe...

CVE-2023-49614

CVE-2023-49614 describes an out-of-bounds write in Intel FPGA firmware on certain Intel FPGA products prior to version 2.9.0, which may allow privilege escalation and information disclosure. Connected sources confirm the affected lineages include Intel FPGA firmware and recommend updating to vers...

CVE-2023-46103

CVE-2023-46103 describes a vulnerability in Intel Core Ultra Processors where a specific sequence of processor instructions can cause unexpected behavior, potentially enabling a denial-of-service condition for an authenticated local user. The issue is discussed across multiple connected documents...

CVE-2024-21862

CVE-2024-21862 concerns Intel’s Quartus Prime Standard Edition Design software prior to version 23.1, where an uncontrolled search path may allow an authenticated user to escalate privileges via local access. The issue is documented across multiple connected sources (NVD entry and Intel advisory)...

CVE-2024-21809

Intel Quadruples Prime Lite Edition before 23.1 is affected by CVE-2024-21809 due to an improper conditions check that could enable privilege escalation via local access for an authenticated user. The issue affects Intel® Quartus® Prime Lite Edition Design software prior to 23.1; colleagues also ...

CVE-2024-21837

CVE-2024-21837 affects Intel Quartus Prime Lite Edition Design software prior to 23.1. Root cause: uncontrolled search path. Impact: authenticated local user may escalate privileges. Affected product: Intel Quartus Prime Lite Edition; Versions before 23.1. Mitigation: upgrade to version 23.1 or l...

CVE-2024-21828

Intel reports CVE-2024-21828 as an improper access control vulnerability in Intel(R) Ethernet Controller Administrative Tools installer software before version 28.3. An authenticated user could potentially escalate privileges via local access. Affected products include Intel(R) Ethernet Adapter C...

CVE-2024-21835

CVE-2024-21835 concerns Intel® XTU software prior to version 7.14.0.15, where insecure inherited permissions may allow an authenticated user to escalate privileges via local access. The root cause is insecure inherited permissions, enabling local privilege escalation. Affected product: Intel® XTU...

CVE-2024-21843

The CVE-2024-21843 entry concerns Intel® Computing Improvement Program software with an uncontrolled search path vulnerability prior to version 2.4.0.10654 that could allow a locally authenticated user to escalate privileges. Affected product: Intel® Computing Improvement Program (before 2.4.0.10...