Privilege escalation

Unquoted search path or element in some IntelR ThunderboltTM DCH drivers for Windows before version 88 may allow an authenticated user to potentially enable escalation of privilege via local access...

Buffer overflow

Improper buffer restrictions in some IntelR ThunderboltTM DCH drivers for Windows before version 88 may allow an authenticated user to potentially enable information disclosure via local access...

Design/Logic Flaw

Uncaught exception for some IntelR PROSet/Wireless and IntelR KillerTM Wi-Fi software before version 22.240 may allow an unauthenticated user to potentially enable denial of service via adjacent access...

Privilege escalation

Uncontrolled search path element in some IntelR VROC software before version 8.0.8.1001 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2023-42776

CVE-2023-42776 affects Intel® SGX DCAP software for Windows prior to version 1.19.100.3. The issue is improper input validation, potentially allowing an authenticated local user to disclose information. Intel recommends updating to 1.19.100.3 or later to remediate. Connected sources (Intel adviso...

CVE-2023-41091

CVE-2023-41091 concerns an uncontrolled search path issue in Intel(R) MPI Library Software prior to version 2021.11. The vulnerability could allow an authenticated user to escalate privileges via local access, due to mismanagement of the library search path. Public references consistently identif...

CVE-2023-40156

CVE-2023-40156 affects Intel® System Support Utility (SSU) for Windows prior to 3.0.0.2. The vulnerability stems from an uncontrolled search path element, potentially allowing an authenticated local attacker to escalate privileges. Intel’s advisory confirms the vulnerable product and recommends u...

CVE-2023-39932

CVE-2023-39932 refers to an uncontrolled search path in the Intel® SUR for Gameplay Software prior to version 2.0.1901, which may allow a privileged user to escalate privileges via local access. Affected software is the Intel System Usage Report (Gameplay Software) prior to 2.0.1901; the root cau...

CVE-2023-40154

CVE-2023-40154 affects Intel® SUR for Gameplay Software prior to version 2.0.1901, where incorrect default permissions may allow a privileged local user to escalate privileges. The issue is documented by Red Hat, NVD, and Intel’s advisory, with confirmed affected product and root cause as stated....

CVE-2023-29153

Intel SPS firmware CVE-2023-29153 affects Intel Server Platform Services prior to SPS_E5_06.01.04.002.0. The issue is uncontrolled resource consumption that may allow a privileged user to cause a denial of service over the network. CVSS 3.1 vector: AV:N/AC:L/PR:H/UI:N/S:U/I:N/A:H (base score 4.9,...

CVE-2023-41252

The CVE-2023-41252 issue affects Intel® QAT software drivers for Windows prior to version QAT1.7-W-1.11.0. The root cause is an out-of-bounds read in these drivers, which could allow an authenticated user to trigger a denial of service via local access. Intel’s advisory and multiple aggregators c...

CVE-2023-39941

CVE-2023-39941 affects Intel® SUR software prior to version 2.4.10587. The flaw is an improper access control that could allow an unauthenticated user to trigger a denial of service via adjacent access, with availability impact noted. Exploitation details are not provided in the documents, but ad...

CVE-2023-33870

CVE-2023-33870 involves insecure inherited permissions in Intel® Ethernet tools and driver install software, enabling an authenticated user to potentially escalate privileges via local access. Affected components include: Intel® Ethernet Connections Boot Utility, Preboot Images, and EFI Drivers (...

CVE-2023-38566

Intel ISPC software prior to version 1.21.0 contains an uncontrolled search path vulnerability that could allow an authenticated local user to escalate privileges. The issue is confirmed across multiple sources (Intel advisory INTEL-SA-00994 and related security records) and affects the Implicit ...

CVE-2023-39432

CVE-2023-39432 affects Intel® Ethernet tools and driver install software prior to version 28.2, due to an improper access control element that could allow an authenticated local attacker to escalate privileges. Affected components include Intel® Ethernet Connections Boot Utility, Preboot Images, ...

CVE-2023-36493

CVE-2023-36493 concerns an uncontrolled search path in the Intel® SDK for OpenCL™ Applications software that could allow an authenticated local user to escalate privileges. Affected: Intel® SDK for OpenCL™ Applications (all versions). Root cause: uncontrolled search path. Impact: potential local ...

CVE-2023-35121

The CVE-2023-35121 issue concerns improper access control in Intel’s oneAPI DPC++/C++ Compiler prior to 2022.2.1 for some toolkits prior to 2022.3.1, enabling potential privilege escalation via local access when authenticated. Affected software is Intel® oneAPI DPC++/C++ Compiler and related tool...

CVE-2023-29162

The CVE-2023-29162 entry concerns Intel’s Intel® oneAPI Toolkits, specifically the Intel C++ Compiler Classic prior to 2021.8 bundled with toolkits before 2022.3.1. The issue is an improper buffer restriction that may allow a privileged local user to escalate privileges. Affected scope includes I...

CVE-2023-35060

Summary: CVE-2023-35060 is an "Uncontrolled search path" vulnerability in Intel’s Battery Life Diagnostic Tool (Intel Battery Life Diagnostic Tool software) affecting versions before 2.3.1. The issue may allow an authenticated, locally positioned attacker to escalate privileges. The connected Int...

CVE-2023-40161

CVE-2023-40161: Improper access control in Intel Unite Client software prior to version 4.2.35041 may allow an authenticated user to escalate privileges via local access. Affected product is Intel Unite Client; root cause is access-control weakness enabling local privilege elevation. Multiple sou...