Intel® NUC Firmware Advisory

Summary: Potential security vulnerabilities in some Intel® NUCs may allow escalation of privilege. Intel is releasing firmware updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2022-24382 Description: Improper input validation in firmware for some IntelR NUCs...

Intel ® NUC BIOS Firmware Advisory

Summary: Potential security vulnerabilities in some Intel® NUC firmware may allow escalation of privilege, denial of service or information disclosure. Intel is releasing firmware updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2022-36339 Description: Improp...

 Intel® Distribution of OpenVINO™ Toolkit Advisory

Summary: A potential security vulnerability in the Intel® Distribution of OpenVINO™ Toolkit software may allow denial of service. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2021-26251 Description: Improper input validation in th...

Intel® System Studio Advisory

Summary: A potential security vulnerability in the Intel® System Studio software may allow escalation of privilege. Intel is not releasing updates to mitigate this potential vulnerability and has issued a Product Discontinuation Notice for Intel® System Studio software. Vulnerability Details:...

Intel® PROSet/Wireless WiFi Software Advisory

Summary: Potential security vulnerabilities in some Intel® PROSet/Wireless WiFi products may allow escalation of privilege or denial of service. Intel is releasing software updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2020-12313 Description: Insufficient...

Intel® Chipset Device Software Advisory

Summary: A potential security vulnerability in Intel® Chipset Device Software INF Utility may allow information disclosure. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2019-14596 Description: Improper access control in the...

Intel® SSD DC Firmware Advisory

Summary: A potential security vulnerability in some Intel® Solid State Drive SSD Data Center DC products may allow information disclosure. Intel is releasing firmware updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2021-0148 Description: Insertion of informatio...

Intel® Processors Return Stack Buffer Underflow Advisory

Summary: A potential security vulnerability in some Intel® Processors may allow information disclosure. Intel is releasing prescriptive guidance to address this potential vulnerability. Vulnerability Details: CVEID: CVE-2022-29901 Description: Non-transparent sharing of branch predictor targets...

Intel® Chipset Device Software Advisory

Summary: A potential security vulnerability in some Intel® Chipset Device Software may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2023-28388 Description: Uncontrolled search path element in some...

Intel® Smart Sound Technology Advisory

Summary: A potential security vulnerability in Intel® Smart Sound Technology may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2020-0583 Description: Improper access control in the subsystem for Intel...

Intel® NUC Firmware Advisory

Summary: Potential security vulnerabilities in system firmware for some Intel® NUC may allow escalation of privilege. Intel is releasing firmware updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2020-0530 Description: Improper buffer restrictions in firmware...

Intel® Software Products Advisory for OpenSSL Vulnerabilities (CVE-2022-3786 & CVE-2022-3602) Advisory

Summary: Security vulnerabilities in OpenSSL for some Intel® software products may allow denial of service. Intel is releasing software product updates to mitigate these vulnerabilities. Vulnerability Details: CVEID: CVE-2022-3602 Non-Intel issued and CVE-2022-3786 Non-Intel issued Description:...

2022.3 IPU - Intel® Chipset Firmware Advisory

Summary: Potential security vulnerabilities in some Intel® Chipset Firmware in Intel® Converged Security and Manageability Engine CSME, Intel® Active Management Technology AMT and Intel® Server Platform Services SPS may allow escalation of privilege or denial of service. Intel is releasing firmwa...

2022.1 IPU – BIOS Advisory

Summary: Potential security vulnerabilities in the BIOS firmware or BIOS authenticated code module for some Intel® Processors may allow escalation of privilege or information disclosure. Intel is releasing BIOS updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID:...

Intel® RAID Web Console 3 for Windows* Advisory

Summary: A potential security vulnerability in the Intel® RAID Web Console 3 for Windows may allow denial of service. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2020-8688 Description: Improper input validation in the IntelR RAID...

Speculative Execution and Indirect Branch Prediction Side Channel Analysis Method

Summary: Updated Recommendations Section 04/04/2018 Today a team of security researchers disclosed several software analysis methods that, when used for malicious purposes, have the potential to improperly gather sensitive data from many types of computing devices with many different vendors’...

Intel® Product Advisory for Apache Log4j2 Vulnerabilities (CVE-2021-44228 & CVE-2021-45046)

Summary: Security vulnerabilities in Apache Log4j2 for some Intel® products may allow escalation of privilege or denial of service. Intel is releasing product updates to mitigate these vulnerabilities. Vulnerability Details: CVEID: CVE-2021-44228 Non-Intel issued Description: JNDI features in...

2022.1 IPU - Intel® Processor Advisory

Summary: A potential security vulnerability in some Intel® Processors may allow information disclosure. Intel is releasing firmware updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2022-21151 Description: Processor optimization removal or modification of...

Software Developer Guidance for Power Advisory

Summary: A potential security vulnerability in some Intel® Processors may allow information disclosure. Intel is releasing guidance to address this potential vulnerability. Vulnerability Details: CVEID: CVE-2022-24436 Description: Observable behavioral in power management throttling for some Inte...

2022.3 IPU – BIOS Advisory

Summary: Potential security vulnerabilities in the BIOS firmware for some Intel® Processors may allow escalation of privilege. Intel is releasing firmware updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2022-26006 Description: Improper input validation in th...

2024.1 IPU - Intel® Atom® Processor Advisory

Summary: A potential security vulnerability in some Intel® Atom® Processors may allow information disclosure. Intel is releasing firmware updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2023-28746 Description: Information exposure through microarchitectural sta...

2020.2 IPU - Intel® RAPL Interface Advisory

Summary: Potential security vulnerabilities in the Intel® Running Average Power Limit RAPL Interface may allow information disclosure. Intel is releasing microcode and Linux driver updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2020-8694 Description:...

Intel® AMT and Intel® Standard Manageability Advisory

Summary: Potential security vulnerabilities in the Intel® Active Management Technology AMT and Intel® Standard Manageability may allow escalation of privilege or information disclosure. Intel is releasing prescriptive guidance to mitigate these potential vulnerabilities. Vulnerability Details:...

2023.1 IPU - Intel® Processor Advisory

Summary: A potential security vulnerability in some Intel® Processors with Intel® Software Guard Extensions SGX may allow information disclosure. Intel is releasing firmware updates to address this potential vulnerability. Vulnerability Details: CVEID: CVE-2022-38090 Description: Improper isolati...

Intel® Server Boards and Server Systems Advisory

Summary: Potential security vulnerabilities in some Intel® Server Boards and Server Systems may allow escalation of privilege or denial of service. Intel is releasing firmware updates to mitigate these potential vulnerabilities Vulnerability Details: CVEID: CVE-2022-30542 Description: Improper...

2023.1 IPU - BIOS Advisory

Summary: Potential security vulnerabilities in the BIOS firmware and Intel® Trusted Execution Technology TXT Secure Initialization SINIT Authenticated Code Modules ACM for some Intel® Processors may allow escalation of privilege. Intel is releasing BIOS updates to mitigate these potential...

Intel® Ethernet E810 Adapter Driver Advisory

Summary: Potential security vulnerabilities in some Intel® Ethernet E810 Adapter Drivers for Linux and Windows may allow denial of service or information disclosure. Intel is releasing driver updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2020-24504...

Intel® Unison™ Software Advisory

Summary: Potential security vulnerabilities in some Intel® Unison™ software may allow denial of service or information disclosure. Intel is releasing software updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2023-2804Non-Intel issued Description: Improper...

DSP Builder for Intel® FPGAs Pro Edition Software Advisory

This advisory contains CVEs in Altera products and has been transferred to Altera for support. The updated advisory can be found at the link below: https://www.altera.com/product-security/advisory-archive/intel-sa-00816.html...

3rd Generation Intel® Xeon® Scalable Processors Advisory

Summary: A potential security vulnerability in some 3rd Generation Intel® Xeon® Scalable Processors may allow information disclosure. Intel is releasing firmware updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2021-33117 Description: Improper access control for...

Q3 2018 Speculative Execution Side Channel Update

Summary: Security researchers have identified a speculative execution side-channel method called L1 Terminal Fault L1TF. This method impacts select microprocessor products supporting Intel® Software Guard Extensions Intel® SGX. Further investigation by Intel has identified two related application...

Intel® NUC Firmware Advisory

Summary: Potential security vulnerabilities in some Intel® NUC BIOS firmware may allow escalation of privilege or denial of service. Intel is releasing firmware updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2021-33164 Description: Improper access control i...

Intel® NUC Software Studio Service Installer Advisory

Summary: A potential security vulnerability in the Intel® NUC Software Studio Service installer may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2022-38103 Description: Insecure inherited permissions...

Intel® PROSet/Wireless WiFi and Killer™ WiFi Software Advisory

Summary: Potential security vulnerabilities in some Intel® PROSet/Wireless WiFi and Killer™ WiFi may allow escalation of privilege, denial of service or information disclosure. Intel is releasing firmware and software updates to mitigate these potential vulnerabilities. Vulnerability Details:...

2026.1 IPU, Intel® Chipset Firmware Advisory

Summary: Potential security vulnerabilities in some Intel® Converged Security and Management Engine Intel® CSME, some Intel® Active Management Technology Intel® AMT, and some Intel® Standard Manageability may allow denial of service or information disclosure. Intel is releasing firmware updates t...

2019.2 IPU – TSX Asynchronous Abort Advisory

Summary: A potential security vulnerability in TSX Asynchronous Abort TAA for some Intel® Processors may allow information disclosure. Intel is releasing firmware updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2019-11135 Description: TSX Asynchronous Abort...

Q2 2018 Speculative Execution Side Channel Update

Summary: Security researchers identified two software analysis methods that, if used for malicious purposes, have the potential to improperly gather sensitive data from multiple types of computing devices with different vendors’ processors and operating systems. Intel is committed to product and...

Intel® Processors Voltage Settings Modification Advisory

Summary: A potential security vulnerability in some Intel® Processors may allow escalation of privilege and/or information disclosure. Intel has released firmware updates to system manufacturers to mitigate this potential vulnerability Vulnerability Details: CVEID: CVE-2019-11157 Description:...

Intel® 82599 Ethernet Controllers Advisory

Summary: Potential security vulnerabilities in the Intel® 82599 Ethernet Series Controllers and Adapters may allow denial of service. Intel is releasing software updates and prescriptive guidance to address these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2021-33096 Description:...

Intel® Processor Graphics Advisory

Summary: A potential security vulnerability in Intel® Processor Graphics may allow information disclosure. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2019-14615 Description: Insufficient control flow in certain data structures f...

Intel® Processors MMIO Stale Data Advisory

Summary: Potential security vulnerabilities in Memory Mapped I/O MMIO for some Intel® Processors may allow information disclosure. Intel is releasing firmware updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2022-21123 Description: Incomplete cleanup of...

Intel® DTT Software Advisory

Summary: A potential security vulnerability in the Intel® Dynamic Tuning Technology DTT software may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2022-29470 Description: Improper access control in th...

Intel® Ethernet Controllers and Adapters Advisory

Summary: Potential security vulnerabilities in some Intel® Ethernet Controllers and Adapters may allow denial of service. Intel is releasing firmware updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2021-33126 Description: Improper access control in the...

Intel® Processors RRSBA Advisory

Summary: A potential security vulnerability in some Intel® Processors may allow information disclosure. Intel is releasing prescriptive guidance to address this potential vulnerability. Vulnerability Details: CVEID: CVE-2022-28693 Description: Unprotected alternative channel of return branch targ...

Intel® PROSet/Wireless WiFi Software Advisory

Summary: Potential security vulnerabilities in some Intel® PROSet/Wireless WiFi products may allow escalation of privilege or denial of service. Intel is releasing software updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2020-0557 Description: Insecure...

2022.2 IPU - Intel® Processor Advisory

Summary: A potential security vulnerability in some Intel® Processors may allow information disclosure. Intel is releasing firmware updates to address this potential vulnerability. Vulnerability Details: CVEID: CVE-2022-21233 Description: Improper isolation of shared resources in some IntelR...

Intel® Processors Post Invalidation RSB Advisory

Summary: A potential security vulnerability in some Intel® Processors may allow information disclosure. Intel is releasing prescriptive guidance to address this potential vulnerability. Vulnerability Details: CVEID: CVE-2022-26373 Description: Non-transparent sharing of return predictor targets...

2019.2 IPU – Intel® Processor Graphics Update Advisory

Summary: A potential security vulnerability in Intel® Processor Graphics may allow denial of service. Intel is releasing software and firmware updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2019-0154 Description: Insufficient access control in subsystem for...

Intel® PROSet/Wireless WiFi , Intel vPro® CSME WiFi and Killer™ WiFi Advisory Advisory

Summary: Potential security vulnerabilities in some Intel® PROSet/Wireless WiFi and Intel vPro® Converged Security and Management Engine CSME WiFi and Killer™ WiFi may allow denial of service. Intel is releasing firmware and software updates to mitigate these potential vulnerabilities...

2019.2 IPU – Intel® Processor Machine Check Error Advisory

Summary: A potential security vulnerability in some Intel® Processors may allow denial of service. Intel has coordinated with OS and hypervisor vendors to provide updates which will mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2018-12207 Description: Improper...