2024.1 IPU OOB - Intel® Xeon® D Processor Advisory

Summary: A potential security vulnerability in some Intel® Xeon® D Processors with Intel® Software Guard Extensions SGX may allow information disclosure. Intel is releasing microcode updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2023-43490 Description:...

PresentMon Advisory

Summary: A potential security vulnerability in the PresentMon software maintained by Intel® may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2022-26086 Description: Uncontrolled search path element i...

Intel® EMA Advisory

Summary: A potential security vulnerability in the Intel® Endpoint Management Assistant EMA software may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2022-38056 Description: Improper neutralization i...

Intel® OFU Software Advisory

Summary: A potential security vulnerability in the Intel® One Boot Flash Utility OFU software may allow denial of service. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVE-2021-33104 Description: Improper access control in the IntelR OFU...

Intel® Distribution for Python Advisory

Summary: A potential security vulnerability in the Intel® Distribution for Python may allow escalation of privilege. Intel is releasing updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2022-28696 Description: Uncontrolled search path in the IntelR Distribution f...

Open AMT Cloud Toolkit Advisory

Summary: A potential security vulnerability in the Open AMT Cloud Toolkit software maintained by Intel® may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2022-25899 Description: Authentication bypass...

Intel® Team Blue App Advisory

Summary: A potential security vulnerability in the Intel® Team Blue mobile application may allow information disclosure. Intel is not releasing updates to mitigate this potential vulnerability and has issued a Product Discontinuation Notice for the Intel® Team Blue mobile application. Vulnerabili...

Intel® Graphics Drivers Advisory

Summary: Potential security vulnerabilities in some Intel® Graphics Drivers may allow escalation of privilege. Intel is releasing software updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2021-0061 Description: Improper initialization in some IntelR Graphics...

Intel® Graphics Drivers Advisory

Summary: Potential security vulnerabilities in some Intel® Graphics Drivers may allow escalation of privilege and/or denial of service. Intel is releasing software updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2020-0510 Description: Out of bounds read in...

Intel® Innovation Engine Advisory

Summary: A potential security vulnerability in the Intel® Innovation Engine Build and Signing Tool may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2020-8675 Description: Insufficient control flow...

2020.1 IPU - BIOS Advisory

Summary: Potential security vulnerabilities in BIOS firmware for some Intel® Processors may allow escalation of privilege and/or denial of service. Intel is releasing firmware updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2020-0528 Description: Improper...

Intel® SNMP Subagent Stand-Alone Advisory for Windows*

Summary: A potential security vulnerability in Intel® SNMP Subagent Stand-Alone for Windows may allow an escalation of privilege. Intel is not releasing updates to mitigate this potential vulnerability and has issued a Product Discontinuation Notice for Intel® SNMP Subagent Stand-Alone for Window...

2019.2 IPU – Intel® TXT Advisory

Summary: A potential security vulnerability in Intel® Trusted Execution Technology TXT with Intel® Processor Graphics may allow information disclosure. Intel is releasing firmware updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2019-0184 Description: Insufficie...

Intel® Turbo Boost Max Technology 3.0 Advisory

Summary: A potential security vulnerability in the Intel® Turbo Boost Max Technology 3.0 driver may allow escalation of privilege. Intel is not releasing updates to mitigate this potential vulnerability and has issued a Product Discontinuation notice for the Intel® Turbo Boost Max Technology 3.0...

Intel® Data Center Manager SDK Advisory

Summary: Multiple potential security vulnerabilities in Intel® Data Center Manager SDK may allow escalation of privilege, denial of service, or information disclosure. Intel is releasing software updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2019-0102...

Intel® RAID Web Console 3 for Windows* Authentication Bypass Advisory

Summary: A potential security vulnerability in Intel® RAID Web Console 3 for Windows may allow information disclosure. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2018-3696 Description: Authentication bypass in the IntelR RAID We...

INTEL-SA-00086 Detection Tool DLL Injection Issue Advisory

Summary: A potential security vulnerability in the INTEL-SA-00086 Detection Tool may allow a privileged user to execute arbitrary code. Intel is releasing INTEL-SA-00086 Detection Tool updates to mitigate this potential vulnerability. Vulnerability Details CVEID: CVE-2018-3686 Description: Code...

Insufficient Input Validation in Bleach module in Intel® Distribution for Python (IDP) version IDP 2018 Update 2 potentially allows an unprivileged user to bypass URI sanitization and cause a Denial of Service via local vector

Summary: Insufficient Input Validation in Bleach module in Intel® Distribution for Python IDP version IDP 2018 Update 2 potentially allows an unprivileged user to bypass URI sanitization and cause a Denial of Service via local vector. Description: A vulnerable version of the Mozilla Bleach librar...

Intel® Optane™ memory module update

Summary: Information disclosure vulnerability in storage media in systems with Intel® Optane™ memory module with Whole Disk Encryption may allow an attacker to recover data via physical access. Description: Intel identified an issue where some systems configured with Whole Disk Encryption and an...

Intel® 2G Firmware Update for Modems using ETWS

Summary: Buffer overflow in ETWS processing module Intel® XMM71xx, XMM72xx, XMM73xx, XMM74xx and Sofia 3G/R allows remote attacker to potentially execute arbitrary code via an adjacent network. Description: In late February 2018, external security researchers identified and disclosed to Intel a...

Intel® Desktop and Intel® Server Boards Privilege Escalation

Summary: Software running administrative ring 0 privilege can under certain circumstances change code running in System Management Mode. Description: To mitigate reported privilege escalation issues, BIOS updates are available for specific Intel motherboards. These changes would help prevent a...

Intel® DCM Advisory

Summary: Potential security vulnerabilities in the Intel® Data Center Manager DCM software may allow escalation of privilege or information disclosure. Intel is releasing software updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2022-40210 Description: Exposu...

ITE Tech* Consumer Infrared Driver for Windows* 10 Advisory

Summary: A potential security vulnerability in the ITE Tech Consumer Infrared Driver for Windows 10 may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2018-3702 Description: Improper permissions in the...

Intel® VTune™ Profiler Advisory

Summary: A potential security vulnerability in the Intel® VTune™ Profiler software may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2022-21807 Description: Uncontrolled search path elements in the...

2021.2 IPU - Intel® Processor Breakpoint Control Flow Advisory

Summary: A potential security vulnerability in some Intel® processors that may allow a denial of service. Intel® is releasing firmware updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2021-0127 Description: Insufficient control flow management in some IntelR...

Intel® oneAPI Toolkit Advisory

Summary: A potential security vulnerability in Intel® oneAPI Toolkits may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2023-29242 Description: Improper access control for IntelR oneAPI Toolkits befor...

Intel® Graphics Drivers Advisory

Summary: Potential security vulnerabilities in some Intel® Graphics Drivers may allow escalation of privilege or denial of service. Intel is releasing software updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2021-0121 Description: Improper access control in...

Intel® IPP and SGX Software Advisory

Summary: A potential security vulnerability in the Intel® Integrated Performance Primitives IPP Crypto Library may allow information disclosure. Intel® IPP is used by Intel® Software Guard Extension SGX, and Intel is releasing software updates to mitigate this potential vulnerability. Vulnerabili...

Intel® Server Board Onboard Video Driver Advisory

Summary: A potential security vulnerability in the Intel® Server Board Onboard Video Driver for Windows may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2020-24450 Description: Uncontrolled search pa...

Intel® Binary Configuration Tool for Windows* Advisory

Summary: A potential security vulnerability in the Intel® Binary Configuration Tool for Windows may allow escalation of privilege. Intel is not releasing updates to mitigate this potential vulnerability and has issued a Product Discontinuation Notice for the Intel® Binary Configuration Tool for...

Intel® CSME Advisory

Summary: A potential security vulnerability in CSME subsystem may allow escalation of privilege, denial of service, and information disclosure. Intel is releasing firmware updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2019-14598 Description: Improper...

Intel® SGX SDK Advisory

Summary: A potential security vulnerability in Intel® Software Guard Extensions SGX SDK may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2020-0561 Description: Improper initialization in the IntelR S...

Intel® NUC Advisory

Summary: A potential security vulnerability in the system firmware for Intel® NUC may allow escalation of privilege, denial of service and/or information disclosure. Intel is releasing firmware updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2019-11140...

Intel® Accelerated Storage Manager in RSTe Advisory

Summary: A potential security vulnerability in Intel® Accelerated Storage Manager in RSTe may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2019-0135 Description: Improper permissions in the installer...

Intel® PROSet/Wireless WiFi Software Advisory

Summary: A potential security vulnerability in the Intel® PROSet/Wireless WiFi Software may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2018-3701 Description: Improper directory permissions in the...

Intel Firmware 2018.4 QSR Advisory

Summary: Multiple potential security vulnerabilities in Intel firmware may allow for escalation of privilege, information disclosure or denial of service. Intel is releasing firmware updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2018-12201 Description:...

Intel PSET Application Install wrapper contains an escalation of privilege vulnerability.

Summary: Intel PSET Application Install wrapper contains an escalation of privilege vulnerability. Description: Intel PSET Application Install wrapper of Intel Parallel Studio XE, Intel System Studio, Intel VTune Amplifier, Intel Inspector, Intel Advisor, Intel MPI Library, Intel Trace Analyzer a...

Intel® SUR for Gameplay Software Advisory

Summary: Potential security vulnerabilities in the Intel® System Usage Report SUR for Gameplay Software may allow escalation of privilege. Intel is not releasing updates to mitigate these potential vulnerabilities and has issued a Product Discontinuation Notice for Intel® System Usage Report for...

Intel®  Battery Life Diagnostic Tool Software Advisory

Summary: A potential security vulnerability in some Intel® Battery Life Diagnostic Tool software may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2023-35060 Description: Uncontrolled search path in...

Intel® SGX DCAP Software Advisory

Summary: A potential security vulnerability in some Intel® Software Guard Extensions SGX Data Center Attestation Primitives DCAP software may allow information disclosure. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2023-42776...

Intel® MAS Software Advisory

Summary: Potential security vulnerabilities in some Intel® Memory and Storage Tool MAS software may allow escalation of privilege or denial of service. Intel is releasing software updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2023-36490 Description: Improp...

2023.4 IPU - Intel® Processor Advisory

Summary: A potential security vulnerability in some Intel® Processors may allow escalation of privilege and/or information disclosure and/or denial of service via local access. Intel is releasing firmware updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2023-235...

Intel® XTU Software Advisory

Summary: A potential security vulnerability in some Intel® Extreme Tuning Utility XTU software may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2023-34350 Description: Uncontrolled search path elemen...

Intel® oneMKL Software Advisory 

Summary: Potential security vulnerabilities in some Intel® oneAPI Math Kernel Library oneMKL may allow ecsalation of privilege. Intel is releasing software updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2022-25864 Description: Uncontrolled search path in so...

Intel® SCS Software Advisory

Summary: A potential security vulnerability in the Intel® Setup and Configuration Software SCS may allow denial of service. Intel is not releasing updates to mitigate this potential vulnerability and has issued a Product Discontinuation Notice for the Intel® SCS software. Vulnerability Details:...

Intel® Trace Analyzer and Collector Software Advisory

Summary: Potential security vulnerabilities in some Intel® Trace Analyzer and Collector software may allow escalation of privilege or information disclosure. Intel is releasing software updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2023-23569 Description:...

Intel® SDP Tool Advisory

Summary: A potential security vulnerability in the Intel® Server Debug and Provisioning SDP Tool may allow information disclosure. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2022-26508 Description: Improper authentication in the...

Intel® IPP Cryptography Advisory

Summary: A potential security vulnerability in an Intel® Integrated Performance Primitives IPP Cryptography software library may allow information disclosure. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2022-26083 Description:...

Intel® Enpirion® Digital Power Configurator GUI Advisory

This advisory contains CVEs in Altera products and has been transferred to Altera for support. The updated advisory can be found at the link below: https://www.altera.com/product-security/advisory-archive/intel-sa-00672.html...

2021.2 IPU - Intel® Processor Shared Resource Advisory

Summary: A potential security vulnerability in some Intel® Processors may allow information disclosure. Intel is releasing firmware updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2021-0145 Description: Improper initialization of shared resources in some IntelR...