CVE-2025-31931

Summary: CVE-2025-31931 describes an uncontrolled search path issue in the Intel ITT API (Instrumentation and Tracing Technology API) prior to version 3.25.4, which can lead to privilege escalation when Ring 3 user applications execute with local access and authenticated user, given high attack c...

kernel: x86/tdx: Fix "in-kernel MMIO" check

A flaw was found in the Linux kernel. Userspace can deceive the kernel into performing MMIO Memory-Mapped IO operations in TDX Trust Domain Extensions on its behalf, allowing a VE Virtualization Exception to be incorrectly handled as a in-kernel MMIO operation...

PT-2025-46387

Name of the Vulnerable Software and Affected Versions IntelR Rapid Storage Technology Application versions prior to 20.0.1021 Description The software contains insecure inherited permissions within Ring 3 User Applications that may allow an escalation of privilege. An unprivileged software...

PT-2025-46517

Name of the Vulnerable Software and Affected Versions GitHub Copilot and Visual Studio Code affected versions not specified Description A security feature bypass can occur due to improper validation of generative AI output in GitHub Copilot and Visual Studio Code. An authorized attacker can explo...

PT-2025-46410

Name of the Vulnerable Software and Affected Versions IntelR QAT Windows software versions prior to 2.6.0 Description An out-of-bounds write issue exists in some IntelR QAT Windows software. This could allow an escalation of privilege. A system software adversary with an authenticated user and a...

PT-2025-46421

Name of the Vulnerable Software and Affected Versions Instrumentation and Tracing Technology API ITT API versions prior to 3.25.4 Description The Instrumentation and Tracing Technology API ITT API software contains an uncontrolled search path issue within Ring 3: User Applications. This may allow...

Intel Rapid Storage Technology 安全漏洞

Intel Rapid Storage Technology RST is a rapid storage technology from Intel Corporation USA that consists of firmware, hardware and software RAID systems. A security vulnerability exists in Intel Rapid Storage Technology versions prior to 20.0.1021, which stems from improper privilege inheritance...

Intel Instrumentation and Tracing Technology API 代码问题漏洞

The Intel Instrumentation and Tracing Technology API is a data collection interface from Intel Corporation USA. A code issue vulnerability exists in the Intel Instrumentation and Tracing Technology API prior to version 3.25.4, which stems from an uncontrolled search path that could lead to...

Intel QAT 代码问题漏洞

Intel QAT Windows software refers to the collection of Intel® Data Protection and Compression Acceleration Technology software components that provide support for the Windows operating system. A code issue vulnerability exists in Intel QAT Windows software that originates from an improper conditi...

CVE-2025-33000: Improper Input Validation

Improper input validation for some Intel QuickAssist Technology before version 2.6.0 within Ring 3: User Applications may allow an escalation of privilege. System software adversary with an authenticated user combined with a low complexity attack may enable escalation of privilege. This result ma...

CVE-2025-32446: Untrusted Pointer Dereference

Untrusted pointer dereference for some Intel QuickAssist Technology software before version 2.6.0 within Ring 3: User Applications may allow an escalation of privilege. System software adversary with an authenticated user combined with a low complexity attack may enable data manipulation. This...

CVE-2025-30509: Improper Input Validation

Improper input validation for some Intel QuickAssist Technology software before version 2.6.0 within Ring 3: User Applications may allow an escalation of privilege. System software adversary with an authenticated user combined with a low complexity attack may enable data manipulation. This result...

CVE-2025-31931: Uncontrolled Search Path Element

Uncontrolled search path for the Instrumentation and Tracing Technology API ITT API software before version 3.25.4 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable...

CVE-2025-24327: Insecure Inherited Permissions

Insecure inherited permissions for some IntelR Rapid Storage Technology Application before version 20.0.1021 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable local co...

Intel QuickAssist Technology 输入验证错误漏洞

Intel QuickAssist Technology is an Intel technology that improves server utilization. The technology improves server efficiency by sharing the stress of compute-intensive tasks to equalize server pressure. An input validation error vulnerability exists in Intel QuickAssist Technology versions pri...

PT-2025-46433

Name of the Vulnerable Software and Affected Versions Intel QuickAssist Technology versions prior to 2.6.0 Description A flaw exists in Intel QuickAssist Technology that, due to improper input validation within Ring 3 User Applications, could allow an attacker to escalate privileges. A system...

PT-2025-46407

Name of the Vulnerable Software and Affected Versions IntelR QAT Windows software versions prior to 2.6.0 Description An untrusted pointer dereference exists in some IntelR QAT Windows software. This issue, occurring within Ring 3: User Applications, may allow an information disclosure. A system...

ITT API Software Advisory

Summary: A potential security vulnerability in some Instrumentation and Tracing Technology API ITT API software may allow escalation of privilage. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2025-31931 Description: Uncontrolled...

e-Excellence U-Office Force SQL注入漏洞

e-Excellence U-Office Force is an e-Office platform from China-based First Class Technology e-Excellence. An SQL injection vulnerability exists in e-Excellence U-Office Force that originates from unvalidated input and could lead to an SQL injection attack...

Rigged Poker Games

The Department of Justice has indicted thirty-one people over the high-tech rigging of high-stakes poker games. In a typical legitimate poker game, a dealer uses a shuffling machine to shuffle the cards randomly before dealing them to all the players in a particular order. As set forth in the...