PT-2025-46426

Name of the Vulnerable Software and Affected Versions IntelR PresentMon versions prior to 2.3.1 Description An improper access control issue exists in some IntelR PresentMon versions before 2.3.1 within Ring 3: User Applications. This may allow a denial of service. A network adversary with a...

PT-2025-46397

Name of the Vulnerable Software and Affected Versions IntelR CIP software versions prior to WIN DCA 2.4.0.11001 Description The software contains a flaw due to unrestricted file upload of a dangerous type within Ring 3 User Applications. This could allow an unprivileged software adversary, combin...

CVE-2025-20622: Sensitive Information in Resource Not Removed Before Reuse

Sensitive information uncleared in resource before release for reuse for some IntelR NPU Drivers for Windows before version 32.0.100.4023 within Ring 3: User Applications may allow an information disclosure. Unprivileged software adversary with an authenticated user combined with a low complexity...

PT-2025-46424

Name of the Vulnerable Software and Affected Versions Intel oneAPI Math Kernel Library versions prior to 2025.2 Description The software contains an improper input validation issue within Ring 3: User Applications that may allow for a denial of service. An unprivileged software adversary with an...

PT-2025-46411

Name of the Vulnerable Software and Affected Versions ACAT versions prior to 3.13 Description A time-of-check time-of-use race condition exists in some ACAT versions prior to 3.13 within Ring 3: User Applications. This can lead to a denial of service. An unprivileged software adversary with an...

PT-2025-46420

Name of the Vulnerable Software and Affected Versions IntelR Graphics Software versions prior to 25.22.1502.2 Description An uncontrolled search path exists in some IntelR Graphics Software versions prior to 25.22.1502.2 within Ring 3 User Applications. This issue may allow an escalation of...

Intel PROSet/Wireless WiFi 缓冲区错误漏洞

Intel PROSet/Wireless WiFi is a wireless network card driver from Intel Corporation USA. A buffer error vulnerability exists in Intel PROSet/Wireless WiFi Software for Windows prior to version 23.160, which stems from an out-of-bounds read in the Ring 2 device driver that could lead to a denial o...

CVE-2025-24327: Insecure Inherited Permissions

Insecure inherited permissions for some IntelR Rapid Storage Technology Application before version 20.0.1021 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable local co...

CVE-2025-35971: Out-of-bounds Write

Out-of-bounds write for some IntelR PROSet/Wireless WiFi Software for Windows before version 23.160 within Ring 2: Device Drivers may allow a denial of service. Unprivileged software adversary with an unauthenticated user combined with a low complexity attack may enable denial of service. This...

CVE-2025-27711: Incorrect Default Permissions

Incorrect default permissions for some IntelR One Boot Flash Update IntelR OFU software before version 14.1.31 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable...

CVE-2025-20614: External Control of File Name or Path

External control of file name or path for some IntelR CIP software before version WINDCA2.4.0.11001 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with a privileged user combined with a low complexity attack may enable escalation of privileg...

CVE-2025-24862: Unrestricted Upload of File with Dangerous Type

Unrestricted upload of file with dangerous type for some IntelR CIP software before version WINDCA2.4.0.11001 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with a privileged user combined with a high complexity attack may enable data...

PT-2025-46430

Name of the Vulnerable Software and Affected Versions Intel QuickAssist Technology versions prior to 2.6.0 Description An issue exists in Intel QuickAssist Technology software that may allow an escalation of privilege. A local attacker with an authenticated user account and low complexity attack...

CVE-2025-24299: Improper Input Validation

Improper input validation for some IntelR CIP software before version WINDCA2.4.0.11001 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable escalation of privilege. This...

PT-2025-46429

Name of the Vulnerable Software and Affected Versions Intel Arc B-series GPUs affected versions not specified Description A configuration issue with default permissions in some firmware for Intel Arc B-series GPUs within Ring 1 device drivers may allow an attacker to gain elevated privileges. A...

CVE-2025-35972: Uncontrolled Search Path Element

Uncontrolled search path for the Intel MPI Library before version 2021.16 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable escalation of privilege. This result may...

Intel ACAT 安全漏洞

Intel ACAT is an open source platform from Intel Corporation USA. A security vulnerability exists in Intel ACAT versions prior to 3.13, which stems from a competitive condition in the Ring 3 user application that could lead to a denial-of-service attack...

PT-2025-46387

Name of the Vulnerable Software and Affected Versions IntelR Rapid Storage Technology Application versions prior to 20.0.1021 Description The software contains insecure inherited permissions within Ring 3 User Applications that may allow an escalation of privilege. An unprivileged software...

CVE-2025-24842: Uncontrolled Search Path Element

Uncontrolled search path for the IntelR System Support Utility before version 4.1.0 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with a privileged user combined with a high complexity attack may enable local code execution. This result may...

CVE-2025-31937: Out-of-bounds Read

Out-of-bounds read for some IntelR QAT Windows software before version 2.6.0. within Ring 3: User Applications may allow a denial of service. System software adversary with an authenticated user combined with a high complexity attack may enable denial of service. This result may potentially occur...