2024.1 IPU - Intel® Processor Bus Lock Advisory

Summary: A potential security vulnerability in the bus lock regulator mechanism for some Intel® Processors may allow denial of service. Intel is releasing firmware updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2023-39368 Description: Protection mechanism...

Intel® SSD Tools Software Advisory

Summary: Potential security vulnerabilities in some Intel® SSD Tools software may allow escalation of privilege or denial of service. Intel is releasing software updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2023-28736 Description: Buffer overflow in some...

Intel® PSR SDK Advisory

Summary: A potential security vulnerability in some Intel® Platform Service Record PSR Software Development Kit SDK software may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2023-29151 Description:...

MAVinci Desktop Software for Intel® Falcon 8+ Advisory

Summary: A potential security vulnerability in the MAVinci Desktop software for Intel® Falcon 8+ may allow escalation of privilege. Intel is not releasing updates to mitigate this potential vulnerability and has issued a Product Discontinuation Notice for MAVinci Desktop software for Intel® Falco...

Intel® SDP Tool Software Advisory

Summary: A potential security vulnerability in some Intel® Server Debug and Provisioning SDP Tool software may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2023-31246 Description: Incorrect default...

Intel® SGX Platform Advisory

Summary: A potential security vulnerability in the Intel® Software Guard Extensions SGX may allow information disclosure. Intel released firmware updates to mitigate this potential Vulnerability Details: CVEID: CVE-2020-24491 Description: Debug message containing addresses of memory transactions ...

Intel® Server Board S2600ST & S2600WF Advisory

Summary: A potential security vulnerability in the Intel® Server Board S2600ST & S2600WF families may allow escalation of privilege. Intel is releasing firmware updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2020-0572 Description: Improper input validation in...

Intel® Visual Compute Accelerator 2 Advisory

Summary: A potential security vulnerability in the Intel® Visual Compute Accelerator 2 may allow escalation of privilege or denial of service. Intel is providing documentation updates to partially mitigate this potential vulnerability. Vulnerability Details CVEID: CVE-2020-8676 Description:...

 Intel® Ethernet I218 Adapter Driver for Windows* Advisory

Summary: A potential security vulnerability in Intel® Ethernet I218 Adapter driver for Windows 10 may allow information disclosure. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2019-11096 Description: Insufficient memory protectio...

Intel® Trace Analyzer 2018 Advisory

Summary: A potential security vulnerability in Intel® Trace Analyzer 2018 in Intel® Parallel Studio XE 2018 may allow an authenticated user to escalate privileges via a local vector. Intel is releasing Intel® Parallel Studio XE 2018 updates to mitigate this potential vulnerability. Vulnerability...

Intel® PROSet/Wireless WiFi Software Advisory

Summary: Multiple potential security vulnerabilities in Cisco Compatible eXtensions CCX component in Intel® PROSet/Wireless WiFi Software may allow escalation of privilege, denial of service and/or information disclosure. Intel is releasing PROSet/Wireless WiFi Software updates to mitigate this...

Insufficient Input Validation in Intel® VTune Amplifier, Intel® Advisor and Intel® Inspector products before version 2018 Update 3 potentially allows an unprivileged user to trigger a Denial of Service via local vector

None...

Intel® Integrated Performance Primitives Cryptography Library Update

Summary: Some implementations in Intel® Integrated Performance Primitives Cryptography Library before version 2018 U3.1 do not properly ensure constant execution time. - 4.7 Medium CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N Affected Products: Intel® Integrated Performance Primitives Cryptograph...

Certain Intel® SATA Solid State Drives Impacted by ATA Drive Password Vulnerability

Summary: A vulnerability was identified in the Intel® Solid-State Drive 540s Series, Intel® Solid State Drive Pro 5400s Series, Intel® Solid State Drive E 5400s Series and Intel® Solid State Drive DC S3100 Series leading to a potential data corruption issue. Description: A vulnerability was...

Potential vulnerability of Intel® SSD 750 Series and Intel® SSD DC P3500 Series

Summary: Intel discovered an issue with certain Intel® Solid State Drives SSDs that could potentially result in an inability to access user data or, in rare cases, potential data loss. Intel is releasing software updates to mitigate this issue. Description: Intel discovered an issue with certain...

Local APIC Elevation of Privilege

Summary: Intel is releasing mitigations for a privilege escalation issue. This issue affects certain Intel processors based on older Intel micro-architectures. The issue identified is a method that enables malicious code to gain access to System Management Mode SMM. Description: An issue was...

Potential for Signature Integrity Compromise and HMAC secret recovery in Intel® Integrated Performance Primitives (Intel® IPP) Cryptography Domain

Summary: The cryptography CP domain in Intel’s newest version of Intel® Integrated Performance Primitives Intel® IPP v7.1.1 has been enhanced to improve its security and customers are strongly urged to update to this release. Description: Intel IPP v7.1.1 introduces Intel® AVX & Intel® AVX2...

Intel® Math Kernel Library Insecure File Permission Local Privilege Escalation

Summary: The Intel® Math Kernel Library Intel® MKL is a library of highly optimized, extensively threaded math routines for science, engineering, and financial applications that require maximum performance. An updated version of the software is available for Intel® MKL users to mitigate this...

Intel® Gaudi® Software Installer Advisory

Summary: A potential security vulnerability in some Intel® Gaudi® software installers may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2024-45067 Description: Incorrect default permissions in some...

Endurance Gaming Mode Software Advisory

Summary: A potential security vulnerability for some Endurance Gaming Mode software may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2024-47550 Description: Incorrect default permissions for some...

Intel® Core™ Ultra Processor Firmware Advisory

Summary: Potential security vulnerabilities for some Intel® Core™ Ultra processors may allow information disclosure. Intel is releasing microcode updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2025-24495 Description: Incorrect initialization of resource in...

Intel® VPL Software Advisory

Summary: A potential security vulnerability in some Intel® Video Processing Library VPL software may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2024-21830 Description: Uncontrolled search path in...

Intel® VROC Software Advisory

Summary: Potential security vulnerabilities in some Intel® Virtual RAID on CPU Intel® VROC software may allow escalation of privilege and denial of service. Intel is releasing software updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2024-29079 Description:...

 Intel® Server Board S2600ST Family BIOS and Firmware Update software Advisory

Summary: Potential security vulnerabilities in the Intel® Server Board S2600ST Family BIOS and Firmware Update software may allow escalation of privilege. Intel is not releasing updates to mitigate this potential vulnerability and has issued a product discontinuation notice for Intel® Server Boar...

Intel® IPP Software Advisory

Summary: A potential security vulnerability in some Intel® Integrated Performance Primitives Intel® IPP software may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2024-28887 Description: Uncontrolled...

Intel® MAS (GUI) Software Advisory

Summary: A potential security vulnerability in Intel® Memory and Storage Tool GUI Intel® MAS may allow denial of service. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2024-27461 Description: Incorrect default permissions in softwa...

Intel® GPA Software Advisory

Summary: A potential security vulnerability in some Intel® Graphics Performance Analyzers Intel® GPA software may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2024-28046 Description: Uncontrolled...

Intel® DSA Software Uninstaller Advisory

Summary: A potential security vulnerability in some Intel® Driver & Support Assistant DSA software uninstallers may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2023-45743 Description: Uncontrolled...

Intel® ITS Software Advisory

Summary: A potential security vulnerability in the Intel® Intelligent Test System ITS software may allow escalation of privilege. Intel is not releasing updates to mitigate this potential vulnerability and has issued a Product Discontinuation Notice for Intel® ITS software. Vulnerability Details:...

Intel® Easy Streaming Wizard Software Advisory

Summary: A potential security vulnerability in the Intel® Easy Streaming Wizard software may allow escalation of privilege. Intel is not releasing updates to mitigate this potential vulnerability and has issued a Product Discontinuation Notice for the Intel® Easy Streaming Wizard software...

Intel® QuickAssist Technology RSA-CRT Vulnerability

Summary: The RSA-CRT implementation in the Intel® QuickAssist Technology QAT Engine for OpenSSL versions prior to 0.5.19 may allow remote attackers to obtain private RSA keys by conducting a Lenstra side-channel attack. Description: The RSA-CRT implementation in the Intel® QuickAssist Technology...

Vulnerability in Intel® RealSense™ Web Component allows authenticated users to elevate privileges via updater subsystem

Summary: The vulnerability allows a potentially malicious 3rd party to gain the highest possible elevation of privilege level in the Operating System. Description: The vulnerability allows a potentially malicious 3rd party to gain the highest possible elevation of privilege in the Operating Syste...

Configuration Bypass During S3 Resume

Summary: System firmware of certain products does not completely protect platform configuration data. Description: During resume from sleep, system firmware needs to reinitialize hardware to a secured configuration. In order to protect against malware that has already compromised an OS, firmware...

BIOS Security Updates for Multiple Issues

Summary: New BIOS updates are available for Intel products. These updates harden the implementation against malicious inputs at various stages of the boot process and runtime. Description: This update addresses issues identified in the process of resuming from a sleep state, processing data store...

ASLR bypass issue affecting multiple Intel® Software Development Products

Summary: In July 2014 an ASLR bypass issue affecting the Intel® Compiler was responsibly disclosed to Intel. Upon further examination, additional Intel® Software Development Products were identified as potentially impacted. Security have been developed to mitigate against this risk. Description: ...

Intel® Desktop Boards Privilege Escalation

Summary: Software running administrative ring 0 privilege can under certain circumstances change code running in System Management Mode. Description: A new BIOS update is available for selected Intel desktop motherboards to ensure proper configuration settings. These changes would prevent a...

Intel® 800 Series Ethernet Linux Driver Advisory

Summary: A potential security vulnerability for some Intel® 800 Series Ethernet Linux Driver may allow denial of service. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2025-27723 Description: Use after free for some Linux kernel...

Intel® Xeon Processor Advisory

Summary: A potential security vulnerability in some Intel® Xeon Processors may allow denial of service. Intel is releasing firmware updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2024-22374 Description: Insufficient control flow management for some Intel® Xeon...

Edge Orchestrator for Intel® Tiber™ Edge Platform Security Advisory

Summary: Potential security vulnerabilities in some Edge Orchestrator software for Intel® Tiber™ Edge Platform may allow escalation of privilege, denial of service or information disclosure. Intel is releasing software updates to mitigate these potential vulnerabilities. Vulnerability Details:...

Intel® GPA and Intel® GPA Framework Software Advisory

Summary: Potential security vulnerabilities in some Intel® Graphics Performance Analyzers Intel® GPA and Intel® Graphics Performance Analyzers Framework Intel® GPA Framework software may allow escalation of privilege or denial of service. Intel is releasing software updates to mitigate these...

Intel® Driver Support Assistant Software Advisory

Summary: A potential security vulnerability in some Intel® Driver Support Assistant Intel® DSA software may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2024-39805 Description: Insufficient...

Intel® XTU Software Advisory

Summary: A potential security vulnerability in the Intel® Extreme Tuning Utility Intel® XTU software may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2024-39372 Description: Uncontrolled search path...

Intel® NUC Software Studio Service Advisory

Summary: Potential security vulnerabilities in the Intel® NUC Software Studio Service software may allow escalation of privilege, denial of service or information disclosure. Intel is not releasing updates to mitigate these potential vulnerabilities and has issued a product discontinuation notice...

2024.3 IPU - Intel® Processor Advisory

Summary: A potential security vulnerability in some Intel® Processors may allow denial of service. Intel is releasing firmware updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2024-24968 Description: Improper finite state machines FSMs in hardware logic in some...

Intel® TDX Seamldr Software Advisory

Summary: A potential security vulnerability in some Intel® TDX Seamldr module software may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2024-21850 Description: Sensitive information in resource not...

Intel® oneAPI DPC++/C++ Compiler Advisory

Summary: A potential security vulnerability in some Intel® oneAPI DPC++/C++ Compiler may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2024-34165 Description: Uncontrolled search path in some Intel®...

Intel® Quartus® Prime Pro Edition Software Advisory

This advisory contains CVEs in Altera products and has been transferred to Altera for support. The updated advisory can be found at the link below: https://www.altera.com/product-security/advisory-archive/intel-sa-01195.html...

Intel® HID Event Filter Software Installer Advisory

Summary: A potential security vulnerability in some Intel® Human Interface Device HID Event Filter software installers may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2024-25561 Description: Insecur...

Intel® oneAPI Compiler Software Advisory

Summary: A potential security vulnerability in some Intel® oneAPI Compiler software may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2024-21857 Description: Uncontrolled search path for some Intel®...

Intel® Advisor Software Advisory

Summary: A potential security vulnerability in some Intel® Advisor software may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2024-26025 Description: Incorrect default permissions for some Intel®...