1044 matches found
Intel® Ethernet Controller RDMA Driver for Linux Advisory
Summary: A potential security vulnerability in the Intel® Ethernet Controller Remote Direct Memory Access RDMA driver for linux may allow information disclosure. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2023-25775 Description:...
Intel® AMT and Intel® ISM Advisory
Summary: Potential security vulnerability in Intel® Active Management Technology AMT, and Intel® Standard Manageability ISM may allow escalation of privilege. Intel is releasing firmware updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2020-8758 Description:...
2019.2 IPU – Intel® Graphics Driver for Windows* and Linux Advisory
Summary: Potential security vulnerabilities in Intel® Graphics Driver for Windows and Linux may allow denial of service. Intel is releasing software updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2019-11112 Description: Memory corruption in Kernel Mode Driv...
Intel® Processors MMIO Undefined Access Advisory
Summary: A potential security vulnerability in Memory Mapped I/O MMIO for some 14nm Client/Xeon E3 Intel® Processors may allow a denial of service in certain virtualized environments. Vulnerability Details: CVEID: CVE-2022-21180 Description: Improper input validation for some Intel® Processors ma...
Frame replay vulnerability in Wi-Fi subsystem in Intel® Dual-Band and Tri-Band Wireless-AC Products allows remote attacker to replay frames via channel-based man-in-the-middle
Summary: A vulnerability relating to frame replay during device sleep has been identified in the Intel® Dual-Band and Tri-Band Wireless-AC Products. An attacker who can successfully establish a channel-based man-in-the-middle can potentially replay frames to impact the integrity or availability o...
2023.2 IPU – BIOS Advisory
Summary: Potential security vulnerabilities in BIOS firmware for some Intel® Processors may allow escalation of privilege and information disclosure. Intel is releasing firmware updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2022-33894 Description: Improper...
Intel® Processor Advisory
Summary: A potential security vulnerability in some Intel® Processors may allow escalation of privilege. Intel is releasing firmware updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2021-0146 Description: Hardware allows activation of test or debug logic at...
Intel® Graphics Drivers Advisory
Summary: Potential security vulnerabilities in some Intel® Graphics Drivers may allow escalation of privilege, denial of service and/or information disclosure. Intel is releasing software updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2020-0544 Description:...
Intel® SCS Discovery Utility and Intel® ACU Wizard Advisory
Summary: A potential security vulnerability in Intel® Setup and Configuration Software Intel® SCS Discovery Utility and Intel® AMT Configuration Utility Wizard Intel® ACU Wizard may allow escalation of privilege. Intel is releasing software updates to mitigate these potential vulnerabilities...
Multiple Security Issues with Intel® Manycore Platform Software Stack (Intel® MPSS) release 3.x
Summary: This Security Bulletin discusses several security vulnerabilities that affect previous versions of Intel® Manycore Platform Software Stack Intel® MPSS release 3.x. Some stem from vulnerabilities in the 3rd-party OpenSSL library, which is built into the coprocessor OS. Others were...
Integrated BMC and OpenBMC Firmware Advisory
Summary: Potential security vulnerabilities in the Integrated Baseboard Management Controller BMC and OpenBMC firmware in some Intel® platforms may allow escalation of privilege or denial of service. Intel is releasing firmware updates to mitigate these potential vulnerabilities. Vulnerability...
BlueZ Advisory
Summary: Potential security vulnerabilities in BlueZ may allow escalation of privilege or information disclosure. BlueZ is releasing Linux kernel fixes to address these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2020-12351 Description: Improper input validation in BlueZ may allo...
Intel® Modular Server Compute Module Advisory
Summary: A potential security vulnerability in Intel® Modular Server MFS2600KI Compute Module may allow escalation of privilege or denial of service. Intel is not releasing updates to mitigate this potential vulnerability and has issued a Product Discontinuation Notice for Intel® Modular Server...
Intel® Chipset Device Software (INF Update Utility) Advisory
Summary: A potential security vulnerability in the Intel® Chipset Device Software INF Update Utility may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2019-0128 Description: Improper permissions in th...
Intel® NUC Software Advisory
Summary: Summary: Potential security vulnerabilities in some Intel® NUC Software may allow escalation of privilege, denial of service, and information disclosure. Intel is releasing software updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2023-28737...
Intel® Processors Load Value Injection Advisory
Summary: Potential security vulnerabilities in some Intel® Processors may allow information disclosure. Intel and others are releasing software updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2020-0551 Description: Load value injection in some IntelR...
OpenSSL* vulnerability – Software Development Tools for Intel® Active Management Technology (Intel® AMT)
Summary: In response to the OpenSSL advisory CVE-2010-0740, Intel is releasing an update to the Intel® Active Management Technology Intel® AMT Software Development Kit SDKand Intel® Setup and Configuration Service Intel® SCS to mitigate this vulnerability. This issue does not affect the Intel®...
Intel® Ethernet Controller Administrative Tools Drivers Advisory
Summary: A potential security vulnerability in some Intel® Ethernet Controller Administrative Tools drivers for Windows may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2022-27808 Description:...
Multiple Intel Software Products impacted by CVE-2016-2108
Summary: Many IntelR SW products use OpenSSL during install procedure. In certain conditions explicitly during product activation, an attacker potentially can execute arbitrary code on client system. Description: The ASN.1 implementation in OpenSSL before 1.0.1o and 1.0.2 before 1.0.2c allows...
Intel® ThunderboltTM DCH Drivers for Windows Advisory
Summary: Potential security vulnerabilities in some Intel® Thunderbolt™ Declarative Componentized Hardware DCH drivers for Windows may allow escalation of privilege, denial of service, and/or information disclosure. Intel is releasing software updates to mitigate these potential vulnerabilities...
Lazy FP State Restore
Summary: System software may utilize the Lazy FP state restore technique to delay the restoring of state until an instruction operating on that state is actually executed by the new process. Systems using Intel® Core-based microprocessors may potentially allow a local process to infer data...
Intel® Quartus Family of Tools Privilege Escalation Vulnerability
This advisory contains CVEs in Altera products and has been transferred to Altera for support. The updated advisory can be found at the link below: https://www.altera.com/product-security/advisory-archive/intel-sa-00151.html...
Intel® Graphics Drivers Advisory
Summary: Potential security vulnerabilities in some Intel® Graphics drivers may allow escalation of privilege, denial of service and information disclosure. Intel is releasing software updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2023-29165 Description:...
Intel® PROSet/Wireless WiFi Software Advisory
Summary: A potential security vulnerability in Intel® PROSet/Wireless WiFi Software may allow denial of service. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2019-0136 Description: Insufficient access control in the IntelR...
Intel® NUC Laptop Kit Advisory
Summary: Potential security vulnerabilities in some Intel® NUC Laptop Kits may allow escalation of privilege. Intel is releasing firmware updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2022-28858 Description: Improper buffer restriction in the firmware for...
Intel® SEAPI Advisory
Summary: A potential security vulnerability in the Intel® Single Event API SEAPI software may allow escalation of privilege. Intel is not releasing updates to mitigate this potential vulnerability and has issued a Product Discontinuation Notice for the Intel® SEAPI software. Vulnerability Details...
2022.1 IPU - Intel® Boot Guard and Intel® TXT Advisory
Summary: A potential security vulnerability in Intel® Boot Guard and Intel® Trusted Execution Technology TXT for some Intel® processors may allow escalation of privilege. Intel is releasing firmware updates and prescriptive guidance to mitigate this potential vulnerability. Vulnerability Details:...
Intel® Wireless Bluetooth® Advisory
Summary: Potential security vulnerabilities in some Intel® Wireless Bluetooth® products may allow escalation of privilege or denial of service. Intel is releasing firmware and software updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2020-12321 Description:...
Intel® Graphics Driver Unified Shader Compiler Advisory
Summary: Multiple potential security vulnerabilities in Intel® Graphics Drivers may allow escalation of privilege or denial of service . Intel is releasing Intel® Graphics Driver updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2018-12152 Description: Pointer...
2023.1 IPU - Intel® Xeon® Processor Advisory
Summary: A potential security vulnerability in some Intel® Xeon® Processors with Intel® Software Guard Extensions SGX may allow escalation of privilege. Intel is releasing firmware updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2022-33196 Description: Incorrec...
Intel Q3’17 ME 6.x/7.x/8.x/9.x/10.x/11.x, SPS 4.0, and TXE 3.0 Security Review Cumulative Update
Summary: In response to issues identified by external researchers, Intel has performed an in-depth comprehensive security review of our Intel® Management Engine ME, Intel® Server Platform Services SPS, and Intel® Trusted Execution Engine TXE with the objective of enhancing firmware resilience. As...
Intel® NUC Kit with Infineon Trusted Platform Module
Summary: Certain Intel® NUC systems contain an Infineon Trusted Platform Module TPM that has an information disclosure vulnerability as described in CVE-2017-15361. Description: Recently, a research team developed advanced mathematical methods to exploit the characteristics of acceleration...
2020.2 IPU – Intel® CSME, SPS, TXE, and AMT Advisory
Summary: Potential security vulnerabilities in Intel® Converged Security and Manageability Engine CSME, Server Platform Services SPS, Intel® Trusted Execution Engine TXE, Intel® Dynamic Application Loader DAL, Intel® Active Management Technology AMT, Intel® Standard Manageability ISM and Intel®...
Intel® NUC Advisory
Summary: A potential security vulnerability in system firmware for Intel® NUC may allow escalation of privilege, denial of service, and/or information disclosure. Intel is releasing firmware updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2019-11094 Description...
Intel® NUC Firmware Advisory
Summary: Potential security vulnerabilities in some Intel® NUC BIOS firmware may allow escalation of privilege or information disclosure. Intel is releasing firmware updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2022-34301Non-Intel issued Description:...
Intel® Unison™ Software Advisory
Summary: Potential security vulnerabilities in some Intel® Unison™ software may allow escalation of privilege, information disclosure or denial of service. Intel is releasing software updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2023-36860 Description:...
Intel AMT® Upgradable to Vulnerable Firmware
Summary: Intel® Active Management Technology, Intel® Standard Manageability, and Intel® Small Business Technology firmware versions 11.0.25.3001 and 11.0.26.3000 anti-rollback will not prevent upgrading to firmware version 11.6.x.1xxx which is vulnerable to CVE-2017-5689 and can be performed by a...
Intel® Trace Hub Advisory
Summary: A potential security vulnerability in some Intel® Trace Hub instances may allow escalation of privilege. Intel is releasing prescriptive guidance to address this potential vulnerability. Vulnerability Details: CVEID: CVE-2026-20709 Description: Use of Default Cryptographic Key in the...
Intel® Wireless Bluetooth® and Killer™ Bluetooth® Advisory
Summary: Potential security vulnerabilities in some Intel® Wireless Bluetooth® and Killer™ Bluetooth® products may allow escalation of privilege, denial of service or information disclosure. Intel is releasing firmware updates to mitigate these potential vulnerabilities. Vulnerability Details:...
Intel® Graphics Drivers Advisory
Summary: Potential security vulnerabilities in Intel® Graphics Drivers may allow escalation of privilege, denial of service and/or information disclosure. Intel is releasing software updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2020-0502 Description:...
Intel® PROSet/Wireless WiFi and KillerTM WiFi Advisory
Summary: Potential security vulnerabilities in some Intel® PROSet/Wireless WiFi and Killer™ WiFi products may allow escalation of privilege or denial of service. Intel is releasing firmware and software updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID:...
Intel® IPP Cryptography Advisory
Summary: Potential security vulnerabilities in Intel® Integrated Performance Primitives IPP Cryptography software may allow information disclosure. Intel is releasing software updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2022-37409 Description: Insufficie...
Intel® RST Advisory
Summary: A potential security vulnerability in the Intel® Rapid Storage Technology RST may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2019-14568 Description: Improper permissions in the executable...
Intel® Server Board TPM Advisory
Summary: A potential security vulnerability in Intel® Server Boards may allow information disclosure. Intel is releasing Intel® Server Board firmware updates to mitigate this potential vulnerability. Vulnerability Details CVEID: CVE-2017-15361 Description: Information disclosure in Infineon TPM i...
Potential vulnerability in the Intel® Ethernet diagnostics driver for Windows*
Summary: A vulnerability was identified in the Intel diagnostics driver. Intel released an update to mitigate this issue in June 2015. Description: A vulnerability was identified in the Intel diagnostics driver IQVW32.sys and IQVW64.sys, also identified as CVE-2015-2291. Intel released an update ...
2023.4 IPU - BIOS Advisory
Summary: Potential security vulnerabilities in the BIOS firmware for some Intel® Processors may allow escalation of privilege or denial of service. Intel is releasing BIOS updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2023-25756 Description: Out-of-bounds...
Intel® Processor Speculative Cross Store Bypass Advisory
Summary: A potential security vulnerability in Intel® Processors may allow information disclosure. Intel is releasing prescriptive guidance to address this potential vulnerability. Vulnerability Details: CVEID: CVE-2021-33149 Description: Observable behavioral discrepancy in some IntelR Processor...
Intel® Wireless Bluetooth® and Killer™ Bluetooth® Advisory
Summary: Potential security vulnerabilities in Intel® Wireless Bluetooth® products and Killer™ Bluetooth® products may allow information disclosure. Intel is releasing firmware updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2020-26555 Non-Intel issued Intel...
Multiple Intel Software Products and API Services impacted by CVE-2014-0160
Summary: On April 7th 2014, OpenSSL.org published a Security Advisory concerning a missing bounds check bug in the implementation of the TLS heartbeat extension CVE-2014-0160. Intel PSIRT will continue to update this advisory as additional information becomes available. Description: On April 7th...
Intel® Rapid Storage Technology Software Advisory
Summary: A potential security vulnerability in some Intel® Rapid Storage Technology software may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2023-39230 Description: Insecure inherited permissions in...