CVE-2023-32618

Uncontrolled search path in some IntelR oneAPI Toolkit and component software installers before version 4.3.2 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2023-43629

Incorrect default permissions in some IntelR GPA software installers before version 2023.3 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2023-42433

Incorrect default permissions in some Endurance Gaming Mode software installers before version 1.3.937.0 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-47550

Incorrect default permissions for some Endurance Gaming Mode software installers may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-45067

Incorrect default permissions in some IntelR GaudiR software installers before version 1.18 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-47550

Incorrect default permissions for some Endurance Gaming Mode software installers may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-42419

Incorrect default permissions for some IntelR GPA and IntelR GPA Framework software installers may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-22378

Incorrect default permissions in some Intel UniteR Client Extended Display Plugin software installers before version 1.1.352.157 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-25561: Insecure Inherited Permissions

Insecure inherited permissions in some IntelR HID Event Filter software installers before version 2.2.2.1 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2023-24460

Incorrect default permissions in some IntelR GPA software installers before version 2023.3 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2023-43629

Incorrect default permissions in some IntelR GPA software installers before version 2023.3 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2023-42433

The CVE-2023-42433 affects Endurance Gaming Mode software installers prior to version 1.3.937.0. Root cause: incorrect default permissions in the installers, enabling an authenticated local user to potentially escalate privileges. Impact: local privilege escalation with a base CVSS 3.1 score of 6...

PT-2024-12036

Name of the Vulnerable Software and Affected Versions IntelR GPA software versions prior to 2023.3 Description The issue is related to incorrect default permissions in some IntelR GPA software installers, which may allow an authenticated user to potentially enable escalation of privilege via loca...

CVE-2024-21813: Exposure of Resource to Wrong Sphere

Exposure of resource to wrong sphere in some IntelR DTT software installers may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2023-32618

Uncontrolled search path in some IntelR oneAPI Toolkit and component software installers before version 4.3.2 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2023-32618: Uncontrolled Search Path Element

Uncontrolled search path in some IntelR oneAPI Toolkit and component software installers before version 4.3.2 may allow an authenticated user to potentially enable escalation of privilege via local access...

Improper access control

Improper access control in some Intel HotKey Services for Windows 10 for Intel NUC P14E Laptop Element software installers before version 1.1.45 may allow an authenticated user to potentially enable denial of service via local access...

CVE-2023-32272

Uncontrolled search path in some Intel NUC Pro Software Suite Configuration Tool software installers before version 3.0.0.6 may allow an authenticated user to potentially enable denial of service via local access...

PT-2024-1329 · Intel · Intel Nuc Pro Software Suite

Name of the Vulnerable Software and Affected Versions: Intel NUC Pro Software Suite versions prior to 3.0.0.6 Description: The issue is related to an uncontrolled search path element in the Intel NUC Pro Software Suite Configuration Tool software installers. This could potentially allow an...

Cybercriminals target graphic designers with GPU miners

Cybercriminals are abusing Advanced Installer, a legitimate Windows tool used for creating software packages, to drop cryptocurrency-mining malware on infected machines. This activity has been ongoing since at least November 2021. The attacker uses Advanced Installer to package other legitimate...