CVE-2025-31647

Uncontrolled search path for some IntelR Graphics Software before version 25.22.1502.2 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable escalation of privilege. This...

CVE-2025-20614

External control of file name or path for some IntelR CIP software before version WINDCA2.4.0.11001 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with a privileged user combined with a low complexity attack may enable escalation of privileg...

CVE-2025-20050

Uncontrolled search path for some IntelR CIP software before version WINDCA2.4.0.11001 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable local code execution. This...

CVE-2025-31937

Out-of-bounds read for some IntelR QAT Windows software before version 2.6.0. within Ring 3: User Applications may allow a denial of service. System software adversary with an authenticated user combined with a high complexity attack may enable denial of service. This result may potentially occur...

CVE-2025-24838

Improper privilege management for some IntelR CIP software before version WINDCA2.4.0.11001 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable escalation of privilege...

CVE-2025-27713

Out-of-bounds write for some IntelR QAT Windows software before version 2.6.0. within Ring 3: User Applications may allow an escalation of privilege. System software adversary with an authenticated user combined with a high complexity attack may enable escalation of privilege. This result may...

CVE-2025-26694

Null pointer dereference for some IntelR QAT Windows software before version 2.6.0. within Ring 3: User Applications may allow a denial of service. System software adversary with an authenticated user combined with a low complexity attack may enable denial of service. This result may potentially...

CVE-2025-35967

Out-of-bounds read for some IntelR PROSet/Wireless WiFi Software for Windows before version 23.160 within Ring 2: Device Drivers may allow a denial of service. Unprivileged software adversary with an unauthenticated user combined with a low complexity attack may enable denial of service. This...

CVE-2025-35971

Out-of-bounds write for some IntelR PROSet/Wireless WiFi Software for Windows before version 23.160 within Ring 2: Device Drivers may allow a denial of service. Unprivileged software adversary with an unauthenticated user combined with a low complexity attack may enable denial of service. This...

EUVD-2025-150136

Malicious code in tadashi-tsssu-tresud npm...

Malicious code in abiua-mobani-ayuma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d931a2859b5d9307d00359b7174977155d190cf36bded0536c43d2a3736ba103 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/gjjd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5162a82fec82292342cda066c8dbde26c551e5f0032d955f7883b9a4e5a247d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-nalako50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eebaaf02afd0aa3e73bb5115c020b3b4ab603d8aeb116607813bc3a2178bfe4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-manaki55 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ba3e4c405aa363f7bd8dcf04315528c3fef003bdce35ce7f321ec58ebfe4916 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in intan-7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 292c65ea6b8b41d693acf6c79ce746ac8f169e12db9da28b6497104d8175accf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-143988

Malicious code in nabuf-otgaf-doigoafo npm...

Malicious code in teagood-lokina99 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c42c54412ff27e68f66cc8422bfc54aea71eaa3150f2e73cde14bbd9a729365d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-143880

Malicious code in nabuf-otin-agogas npm...

Malicious code in uyifiuza-iytadut-daina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 346006a8cbfc7c16b0be7c08985763955d05e0577b1ec34a2831a4083af49517 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mans-nufatimant-nuts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a61fe24fe7a82c9ffc6028dc001ad6d839eec51a80ab23d18c6ddfb88da0f2ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...