CVE-2023-28745

The CVE-2023-28745 vulnerability affects Intel’s QSFP+ Configuration Utility software across all versions. It is caused by an uncontrolled search path, enabling an authenticated user with local access to potentially escalate privileges. The issue is documented with a CVSS v3.1 base score of 6.7 (...

CVE-2023-25073

CVE-2023-25073 concerns Intel® DSA software prior to version 23.4.33. The issue is described as improper access control that may allow an authenticated user to potentially enable a denial of service via local access. Affected product: Intel® Driver & Support Assistant (DSA) software before 23.4.3...

CVE-2023-35062

Intel DSA software before version 23.4.33 contains an improper access control vulnerability that may allow a privileged user to escalate privileges via local access. Affected product: Intel® Driver & Support Assistant (DSA) software. Root cause: improper access control leading to privilege escala...

CVE-2023-39425

Intel DSA software prior to version 23.4.33 contains an improper access control vulnerability (CVE-2023-39425) that could allow an authenticated user to escalate privileges via local access. The advisory notes a high risk (CVSS v3.1 base score 8.8) with local attack vector and requires an update ...

CVE-2023-36490

CVE-2023-36490 affects Intel Memory and Storage Tool (MAS) software prior to version 2.3. The root cause is improper initialization, allowing an authenticated local user to potentially trigger a denial-of-service. Intel’s advisory and multiple sources confirm affected versions and remediation: up...

CVE-2023-41090

Intel Memory and Storage Tool (MAS) software before version 2.3 contains a race condition (CVE-2023-41090) that may allow a local privileged user to escalate privileges. Affected: MAS prior to 2.3. Root cause: race condition during local access operations. Mitigation: update to MAS 2.3 or later p...

CVE-2023-35769

CVE-2023-35769 affects Intel CIP software prior to version 2.4.10577. The root cause is an uncontrolled search path, which could allow an authenticated user to escalate privileges via local access. Affected products are Intel CIP software before 2.4.10577. Mitigation: upgrade to version 2.4.10577...

CVE-2023-38135

CVE-2023-38135 affects Intel® Performance Maximizer (PM) software. The root cause is improper authorization that may allow a privileged user to escalate privileges via local access, with CVSS 3.1 base score 6.7 (LOCAL, HIGH impact on confidentiality, integrity, and availability). Intel's advisory...

CVE-2023-28715

CVE-2023-28715: Improper access control in Intel oneAPI Toolkit and component software installers before version 4.3.2 may allow an authenticated user to potentially cause denial of service via local access. Affected products include Intel oneAPI Toolkits and installers prior to 4.3.2. Root cause...

CVE-2023-38561

Intel XTU software prior to version 7.12.0.29 suffers improper access control that may allow an authenticated local user to escalate privileges. Affects Intel XTU versions before 7.12.0.29; CVEs include CVE-2023-32647, CVE-2023-28407, and CVE-2023-38561. Mitigation: update to 7.12.0.29 or later. ...

CVE-2023-28407

CVE-2023-28407 concerns an uncontrolled search path vulnerability in some Intel® XTU software prior to version 7.12.0.29, potentially allowing an authenticated user to escalate privileges via local access. The issue is documented in Intel’s advisory and Red Hat/NVD entries, which specify the affe...

CVE-2023-32647

CVE-2023-32647 describes an "improper access control" in Intel® XTU software prior to version 7.12.0.29 that may allow an authenticated local user to escalate privileges. Affected product: Intel XTU software before 7.12.0.29. Root cause: improper access control. Impact: local privilege escalation...

CVE-2023-34351

CVE-2023-34351 affects Intel® PCM software prior to version 202307. The issue is a buffer underflow in PCM components that could allow an unauthenticated remote attacker to trigger a denial of service via network access. The CVSS v3.1 base score is 7.5 (High), with network attack vector, no privi...

CVE-2023-32646

Intel VROC software prior to 8.0.8.1001 contains an Uncontrolled search path element vulnerability that could allow an authenticated local user to escalate privileges. Public documents confirm affected product: Intel(R) VROC software before version 8.0.8.1001. Intel’s advisory (Intel SA-00953) an...

CVE-2023-34315

Intel VROC software prior to version 8.0.8.1001 contains an incorrect default permissions issue that could allow an authenticated local user to escalate privileges. The CVE-2023-34315 entry is confirmed by Intel’s advisory (INTEL-SA-00953) and NVD/NIST records, which cite a CVSSv3.1 base score of...

CVE-2023-31271

CVE-2023-31271 affects Intel® VROC software prior to version 8.0.8.1001, where improper access control may allow an authenticated local user to potentially escalate privileges. The Red Hat, NVD/NIST, and Intel advisory ecosystem corroborates the issue as a local-privilege-escalation vulnerability...

CVE-2023-27517

The CVE-2023-27517 entry concerns Intel Optane PMem software with improper access control that could allow an authenticated local user to escalate privileges. Affected components are Intel Optane PMem software prior to 01.00.00.3547, 02.00.00.3915, and 03.00.00.0483. The vulnerability’s base impa...

CVE-2023-32644

CVE-2023-32644 describes a protection mechanism failure in Intel® PROSet/Wireless and Intel® Killer™ Wi‑Fi software prior to version 22.240, which may allow an unauthenticated attacker to cause a denial of service via adjacent access. The vulnerability affects Intel wireless drivers on Windows (a...

CVE-2023-26586

CVE-2023-26586 affects Intel PROSet/Wireless and Intel Killer Wi‑Fi software prior to version 22.240. The root cause is an uncaught exception that may allow an unauthenticated user to potentially cause a denial of service via adjacent access. Intel’s advisory (and related sources) confirm affecte...

CVE-2023-32651

The CVE-2023-32651 issue affects Intel PROSet/Wireless and Intel Killer Wi‑Fi software before version 22.240, caused by improper input validation, potentially allowing an unauthenticated attacker to trigger denial of service via adjacent access. Remediation per the connected Intel advisory is to ...