CVE-2025-24307

Improper privilege management for some IntelR CIP software before version WINDCA2.4.0.11001 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable data manipulation. This...

CVE-2025-24307

Improper privilege management for some IntelR CIP software before version WINDCA2.4.0.11001 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable data manipulation. This...

CVE-2025-24299

Improper input validation for some IntelR CIP software before version WINDCA2.4.0.11001 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable escalation of privilege. This...

CVE-2025-22391

CVE-2025-22391 concerns an improper access control issue in SigTest . Multiple sources (Intel advisory, Red Hat, CNNVD, PT Security) identify the vulnerability as an elevation of privilege that could be triggered by an unprivileged, authenticated user with a high-complexity, locally-executed atta...

CVE-2025-22391

Improper access control for some SigTest before version 6.1.10 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable escalation of privilege. This result may potentially...

CVE-2025-20614

CVE-2025-20614 concerns Intel’s CIP software prior to WIN_DCA_2.4.0.11001, where external control of a file name or path in Ring 3 user applications may enable privilege escalation. The description across connected sources states an unprivileged software adversary with a privileged user and a low...

CVE-2025-20065

CVE-2025-20065 affects Intel Display Virtualization for Windows OS driver prior to version 1797. The Red Hat and NVD entries describe an uncontrolled search path in Ring 2 device drivers that could enable local privilege escalation for an authenticated, low-privilege user with high attack complex...

CVE-2025-20065

Uncontrolled search path for some Display Virtualization for Windows OS software before version 1797 within Ring 2: Device Drivers may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable escalation of...

CVE-2025-20056

Improper input validation for some Intel VTune Profiler before version 2025.1 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable data manipulation. This result may...

EUVD-2025-74045

An ACAP configuration file lacked sufficient input validation, which could allow a path traversal attack leading to potential privilege escalation. This vulnerability can only be exploited if the Axis device is configured to allow the installation of unsigned ACAP applications, and if an attacker...

PT-2025-46447

Name of the Vulnerable Software and Affected Versions InDesign Desktop versions 20.5, 19.5.5 and earlier Description InDesign Desktop versions 20.5, 19.5.5 and earlier are susceptible to a Heap-based Buffer Overflow. Successful exploitation of this issue could lead to arbitrary code execution wit...

PT-2025-46449

Name of the Vulnerable Software and Affected Versions InDesign Desktop versions 20.5, 19.5.5 and earlier Description InDesign Desktop versions 20.5, 19.5.5 and earlier are susceptible to a Heap-based Buffer Overflow. Successful exploitation of this issue could lead to arbitrary code execution wit...

PT-2025-46405

Name of the Vulnerable Software and Affected Versions IntelR Processor Identification Utility versions prior to 8.0.43 Description The IntelR Processor Identification Utility, before version 8.0.43, has incorrect default permissions within Ring 3, potentially allowing an escalation of privilege. ...

PT-2025-46527

Name of the Vulnerable Software and Affected Versions Format Plugins versions 1.1.1 and earlier Description Format Plugins versions 1.1.1 and earlier are susceptible to an Out-of-bounds Read issue, potentially leading to memory exposure. An attacker could exploit this to disclose sensitive...

PT-2025-46396

Name of the Vulnerable Software and Affected Versions IntelR CIP software versions prior to WIN DCA 2.4.0.11001 Description A protection mechanism failure exists in some IntelR CIP software. This issue, occurring within Ring 3: User Applications, may allow an unprivileged software adversary with ...

PT-2025-46522

Name of the Vulnerable Software and Affected Versions Format Plugins versions 1.1.1 and earlier Description Format Plugins versions 1.1.1 and earlier are susceptible to an Out-of-bounds Read issue, potentially leading to memory exposure. An attacker could exploit this to disclose sensitive...

PT-2025-46417

Name of the Vulnerable Software and Affected Versions IntelR PresentMon versions prior to 2.3.1 Description The software has default permissions that, in some cases, may allow for an escalation of privilege. An unprivileged software adversary with an authenticated user and a high complexity attac...

PT-2025-46306

Name of the Vulnerable Software and Affected Versions Axis ACAP Application framework affected versions not specified Description The ACAP Application framework may allow for privilege escalation through a symlink attack. Exploitation requires the Axis device to be configured to permit the...

PT-2025-46493

Name of the Vulnerable Software and Affected Versions Illustrator on iPad versions 3.0.9 and earlier Description Illustrator on iPad versions 3.0.9 and earlier are susceptible to an Integer Underflow vulnerability. Successful exploitation of this issue could lead to arbitrary code execution withi...

PT-2025-46446

Name of the Vulnerable Software and Affected Versions Illustrator versions 28.7.10 through 29.8.2 Description Illustrator versions 28.7.10 and 29.8.2, and earlier, are susceptible to a Heap-based Buffer Overflow. Successful exploitation of this issue could lead to arbitrary code execution with th...