Intel® QuickAssist Technology Engine for OpenSSL Advisory

Summary: Potential security vulnerabilities in the Intel® QuickAssist Technology Intel® QAT Engine for OpenSSL engine for OpenSSL software may allow information disclosure . Intel is releasing software updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2024-336...

Intel® IPP Software Advisory

Summary: A potential security vulnerability in some Intel® Integrated Performance Primitives Intel® IPP software may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2024-28952 Description: Uncontrolled...

Intel® IPP Software Advisory

Summary: A potential security vulnerability in some Intel® Integrated Performance Primitives Intel® IPP software may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2024-28887 Description: Uncontrolled...

Intel® MPI Library Software Advisory

Summary: A potential security vulnerability in some Intel® MPI Library software may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2024-28876 Description: Uncontrolled search path for some Intel® MPI...

Intel® GPA Software Advisory

Summary: A potential security vulnerability in some Intel® Graphics Performance Analyzers Intel® GPA software may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2024-28046 Description: Uncontrolled...

Intel® CST Software Advisory

Summary: A potential security vulnerability in some Intel® Context Sensing Technology CST software may allow escalation of privilege or denial of service. Intel is releasing software updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2023-40155 Description:...

Intel® Easy Streaming Wizard Software Advisory

Summary: A potential security vulnerability in the Intel® Easy Streaming Wizard software may allow escalation of privilege. Intel is not releasing updates to mitigate this potential vulnerability and has issued a Product Discontinuation Notice for the Intel® Easy Streaming Wizard software...

Intel® ITS Software Advisory

Summary: A potential security vulnerability in the Intel® Intelligent Test System ITS software may allow escalation of privilege. Intel is not releasing updates to mitigate this potential vulnerability and has issued a Product Discontinuation Notice for Intel® ITS software. Vulnerability Details:...

Intel® SDP Tool Software Advisory

Summary: A potential security vulnerability in some Intel® Server Debug and Provisioning SDP Tool software may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2023-31246 Description: Incorrect default...

Intel® NUC Pro Chassis Element Driver Advisory

Summary: A potential security vulnerability in some Intel® NUC Pro Chassis Element AverMedia Capture Card drivers may allow an escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2021-0160 Description: Uncontroll...

Intel® SGX Platform Software Advisory

Summary: A potential security vulnerability in the Intel® Software Guard Extensions SGX Platform Software for Windows may allow denial of service. Intel has released software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2020-24452 Description: Improper input...

Intel® PROSet/Wireless WiFi Software Advisory

Summary: Multiple potential security vulnerabilities in Cisco Compatible eXtensions CCX component in Intel® PROSet/Wireless WiFi Software may allow escalation of privilege, denial of service and/or information disclosure. Intel is releasing PROSet/Wireless WiFi Software updates to mitigate this...

Intel® Deep Learning Training Tool Beta 1 security vulnerability

Summary: A vulnerability in the Intel® Deep Learning Training Tool Beta 1 allows a network attacker to remotely execute code as a local user. Description: A vulnerability in the Intel® Deep Learning Training Tool Beta 1 allows a network attacker to remotely execute code as a local user. High 8.3...

Intel® AMT Clickjacking Vulnerability

Summary: Insufficient clickjacking protection in the Web User Interface of Intel® AMT firmware versions before 9.1.40.1000, 9.5.60.1952, 10.0.50.1004, 11.0.0.1205, and 11.6.25.1129 potentially allowing a remote attacker to hijack users web clicks via attacker's crafted web page. Description:...

Intel® QuickAssist Technology RSA-CRT Vulnerability

Summary: The RSA-CRT implementation in the Intel® QuickAssist Technology QAT Engine for OpenSSL versions prior to 0.5.19 may allow remote attackers to obtain private RSA keys by conducting a Lenstra side-channel attack. Description: The RSA-CRT implementation in the Intel® QuickAssist Technology...

Vulnerability in Intel® RealSense™ Web Component allows authenticated users to elevate privileges via updater subsystem

Summary: The vulnerability allows a potentially malicious 3rd party to gain the highest possible elevation of privilege level in the Operating System. Description: The vulnerability allows a potentially malicious 3rd party to gain the highest possible elevation of privilege in the Operating Syste...

Local APIC Elevation of Privilege

Summary: Intel is releasing mitigations for a privilege escalation issue. This issue affects certain Intel processors based on older Intel micro-architectures. The issue identified is a method that enables malicious code to gain access to System Management Mode SMM. Description: An issue was...

Configuration Bypass During S3 Resume

Summary: System firmware of certain products does not completely protect platform configuration data. Description: During resume from sleep, system firmware needs to reinitialize hardware to a secured configuration. In order to protect against malware that has already compromised an OS, firmware...

BIOS Security Updates for Multiple Issues

Summary: New BIOS updates are available for Intel products. These updates harden the implementation against malicious inputs at various stages of the boot process and runtime. Description: This update addresses issues identified in the process of resuming from a sleep state, processing data store...

Potential for Signature Integrity Compromise and HMAC secret recovery in Intel® Integrated Performance Primitives (Intel® IPP) Cryptography Domain

Summary: The cryptography CP domain in Intel’s newest version of Intel® Integrated Performance Primitives Intel® IPP v7.1.1 has been enhanced to improve its security and customers are strongly urged to update to this release. Description: Intel IPP v7.1.1 introduces Intel® AVX & Intel® AVX2...

Privilege Escalation in Intel® Hybrid Cloud (IHC)

Summary: A Citrix XenServer potential vulnerability has recently been reported that could pose a security risk to any system using XenServer Hypervisor, including the Intel® Hybrid Cloud IHC platform which uses Citrix XenServer VMM as the virtualization platform. While we are not aware of any...

Intel® Desktop Boards Privilege Escalation

Summary: Software running administrative ring 0 privilege can under certain circumstances change code running in System Management Mode. Description: A new BIOS update is available for selected Intel desktop motherboards to ensure proper configuration settings. These changes would prevent a...

Display Virtualization for Windows OS Advisory

Summary: A potential security vulnerability in some Display Virtualization for Windows OS driver software may allow denial of service. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2025-36510 Description: Improper buffer restrictio...

Intel® Xeon Processor Advisory

Summary: A potential security vulnerability in some Intel® Xeon Processors may allow denial of service. Intel is releasing firmware updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2024-22374 Description: Insufficient control flow management for some Intel® Xeon...

Intel® Ethernet Connections Boot Utility Software Advisory

Summary: A potential security vulnerability in the Intel® Ethernet Connections Boot Utility software may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2025-20015 Description: Uncontrolled search path...

2024.4 IPU, Intel® Processor Advisory

Summary: A potential security vulnerability in some Intel® Processors may allow denial of service. Intel is releasing microcode updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2024-31068 Description: Improper Finite State Machines FSMs in Hardware Logic for som...

Intel® NUC Software Studio Service Advisory

Summary: Potential security vulnerabilities in the Intel® NUC Software Studio Service software may allow escalation of privilege, denial of service or information disclosure. Intel is not releasing updates to mitigate these potential vulnerabilities and has issued a product discontinuation notice...

Intel® TDX Seamldr Software Advisory

Summary: A potential security vulnerability in some Intel® TDX Seamldr module software may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2024-21850 Description: Sensitive information in resource not...

2024.3 IPU - UEFI Firmware Advisory

Summary: Potential security vulnerabilities in UEFI firmware for some Intel® Processors may allow escalation of privilege, denial of service or information disclosure. Intel is releasing UEFI firmware updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2023-4277...

2024.3 IPU - Intel® Processor Advisory

Summary: A potential security vulnerability in some Intel® Processors may allow denial of service. Intel is releasing firmware updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2024-24968 Description: Improper finite state machines FSMs in hardware logic in some...

Intel® Advisor Software Advisory

Summary: A potential security vulnerability in some Intel® Advisor software may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2024-26025 Description: Incorrect default permissions for some Intel®...

Intel® FPGA SDK for OpenCL™ Software Technology Advisory

Summary: A potential security vulnerability in some Intel® FPGA SDK for OpenCL™ software technology may allow escalation of privilege. Intel is not releasing updates to mitigate this potential vulnerability and has issued a Product Discontinuation Notice for Intel® FPGA SDK for OpenCL™ software...

Intel® oneAPI Compiler Software Advisory

Summary: A potential security vulnerability in some Intel® oneAPI Compiler software may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2024-21857 Description: Uncontrolled search path for some Intel®...

Intel® DSA Software Uninstaller Advisory

Summary: A potential security vulnerability in some Intel® Driver & Support Assistant DSA software uninstallers may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2023-45743 Description: Uncontrolled...

2024.1 IPU - BIOS Advisory

Summary: A potential security vulnerability in BIOS firmware for some Intel® Processors may allow escalation of privilege. Intel is releasing BIOS updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2023-32282 Description: Race condition in BIOS firmware for some...

2024.1 IPU - Intel® Chipset Software and SPS Advisory

Summary: Potential security vulnerabilities in the Intel® Converged Security Management Engine CSME installer, Intel® Local Manageability Service software and Intel® Server Platform Servcies SPS may allow information disclosure, escalation of privilege, or denial of service. Vulnerability Details...

 Intel® Ethernet I218 Adapter Driver for Windows* Advisory

Summary: A potential security vulnerability in Intel® Ethernet I218 Adapter driver for Windows 10 may allow information disclosure. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2019-11096 Description: Insufficient memory protectio...

DCI Policy Update

Summary: Intel is releasing Direct Connect Interface DCI policy update. Description: Existing UEFI setting restrictions for DCI Direct Connect Interface in 5th and 6th generation Intel® Xeon® Processor E3 Family, Intel® Xeon® Scalable processors, and Intel® Xeon® Processor D Family can potentiall...

Potential vulnerability of Intel® SSD 750 Series and Intel® SSD DC P3500 Series

Summary: Intel discovered an issue with certain Intel® Solid State Drives SSDs that could potentially result in an inability to access user data or, in rare cases, potential data loss. Intel is releasing software updates to mitigate this issue. Description: Intel discovered an issue with certain...

ASLR bypass issue affecting multiple Intel® Software Development Products

Summary: In July 2014 an ASLR bypass issue affecting the Intel® Compiler was responsibly disclosed to Intel. Upon further examination, additional Intel® Software Development Products were identified as potentially impacted. Security have been developed to mitigate against this risk. Description: ...

Intel® Manycore Platform Software Stack Privilege Escalation

Summary: A previously undisclosed vulnerability in the Intel® Manycore Platform Software Stack Intel® MPSS was discovered during internal testing. The vulnerability could allow elevation of privilege under certain circumstances if an attacker has a valid account on a host that contains an Intel®...

SINIT Buffer Overflow Vulnerability

Summary: Intel® Trusted Execution Technology SINIT Authenticated Code Modules ACMs are susceptible to a buffer overflow issue. Intel is providing updated SINIT ACMs to mitigate this issue and microcode updates to revoke vulnerable SINIT ACMs. Description: When Intel® Trusted Execution Technology...

Intel® 800 Series Ethernet Linux Driver Advisory

Summary: A potential security vulnerability for some Intel® 800 Series Ethernet Linux Driver may allow denial of service. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2025-27723 Description: Use after free for some Linux kernel...

Intel® Gaudi® Software Installer Advisory

Summary: A potential security vulnerability in some Intel® Gaudi® software installers may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2024-45067 Description: Incorrect default permissions in some...

Intel® Graphics Software Advisory

Summary: Potential security vulnerabilities in some Intel® Graphics software may allow escalation of privilege, denial of service or information disclosure. Intel is releasing software updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2025-20101 Description:...

Intel® Ethernet Network Adapter Software  Advisory

Summary: Potential security vulnerabilities in some Intel® Ethernet Network Adapter software may allow escalation of privilege. Intel is releasing software updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2025-20104 Description: Race condition in some...

2025.1 IPU - UEFI Firmware Advisory

Summary: Potential security vulnerabilities in the UEFI firmware for some Intel® Processors may allow escalation of privilege, denial of service, or information disclosure. Intel is releasing UEFI firmware and CPU microcode updates to mitigate these potential vulnerabilities. Vulnerability Detail...

Intel® oneAPI DPC++/C++ Compiler Advisory

Summary: A potential security vulnerability in some Intel® oneAPI DPC++/C++ Compiler may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2024-34165 Description: Uncontrolled search path in some Intel®...

Intel® EMA Software Advisory 

Summary: A potential security vulnerability in some Intel® Endpoint Management Assistant software Intel® EMA may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2024-32483 Description: Improper access...

Intel® SDP Tool for Windows Software Advisory

Summary: Potential security vulnerabilities in the Intel® Server Debug and Provisioning Tool for Windows software Intel® SDP may allow escalation of privilege. Intel is not releasing software updates to mitigate these potential vulnerabilities and has issued a product discontinuation notice for...