1044 matches found
Intel® Unite Privilege Escalation Advisory
Summary: A potential security vulnerability in Intel Unite® Solution administrative portal may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2019-0101 Description: Authentication bypass in the Intel...
Intel® Data Center Manager SDK Advisory
Summary: Multiple potential security vulnerabilities in Intel® Data Center Manager SDK may allow escalation of privilege, denial of service, or information disclosure. Intel is releasing software updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2019-0102...
Pointer dereference in subsystem in Intel(R) Graphics Driver allows unprivileged user to elevate privileges via local access
Summary: The Intel® Graphics Drivers for Windows Code can fail to adequately validate a pointer input. This may lead to modification of kernel memory and a potential for an escalation of privilege. Reference CVE-2017-5727. Description: The Intel® Graphics Drivers for Windows Code can fail to...
2019.2 IPU – Intel® CSME, Intel® SPS, Intel® TXE, Intel® AMT, Intel® PTT and Intel® DAL Advisory
Summary: Potential security vulnerabilities in Intel® Converged Security and Manageability Engine CSME, Intel® Server Platform Services SPS, Intel® Trusted Execution Engine TXE, Intel® Active Management Technology AMT, Intel® Platform Trust Technology PTT and Intel® Dynamic Application Loader DAL...
Intel® NUC Firmware Security Advisory
Summary: A potential security vulnerability in system firmware for Intel® NUC may allow escalation of privilege. Intel is releasing firmware updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2017-3718 Description: Improper setting of device configuration in syste...
Intel® Optane™ SSD DC P4800X Advisory
Summary: A potential security vulnerability in Intel® Optane™ SSD DC P4800X may allow denial of service. Intel is releasing firmware updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2018-12166 Description: Insufficient write protection in firmware for IntelR...
Intel® System Support Utility for Windows* Advisory
Summary: A potential security vulnerability in Intel® System Support Utility for Windows may allow an escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2019-0088 Description: Insufficient path checking in Intel...
Intel® PROSet/Wireless WiFi Software Advisory
Summary: A potential security vulnerability in Intel® PROSet/Wireless WiFi Software may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2018-12177 Description: Improper directory permissions in the...
Power Management Controller (PMC) Security Advisory
Summary: A potential security vulnerability in power management controller firmware may allow escalation of privilege and/ or information disclosure. Intel is releasing firmware updates to mitigate this potential vulnerability. Vulnerability Details CVEID: CVE-2018-3643 Description: A vulnerabili...
Intel® QuickAssist Technology for Linux Advisory
Summary: A potential security vulnerability in Intel® QuickAssist Technology for Linux may allow denial of service. Intel is releasing documentation and software updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2018-12206 Description: Improper configuration o...
Intel® Solid State Drive Toolbox File Permissions Advisory
Summary: A potential security vulnerability in Intel® Solid State Drive Toolbox may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2018-18097 Description: Improper directory permissions in IntelR Solid...
Intel® Parallel Studio XE for Windows* Vulnerability Advisory
Summary: A potential security vulnerability in Intel® Parallel Studio XE for Windows may allow for an escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2018-3704 Description: Improper directory permissions in t...
Intel® VTune Amplifier 2018 for Windows* Update 3 Advisoy
Summary: A potential security vulnerability in Intel® VTune Amplifier 2018 for Windows may allow Escalation of Privilege. Intel is releasing VTune Amplifier updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2018-18093 Description: Improper file permissions in the...
Intel® Integrated Performance Primitives (Intel® IPP) Advisory
Summary: A potential security vulnerability in Intel® IPP may allow information disclosure. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2018-12155 Description: Data leakage in cryptographic libraries for IntelR IPP before 2019...
Intel® Ready Mode Technology File Permissions Advisory
Summary: A potential security vulnerability in the Intel® Ready Mode Technology may allow for escalation of privilege. Intel is not releasing updates to mitigate this potential vulnerability and has issued a Product Discontinuation notice for Intel® Ready Mode Technology. Vulnerability Details:...
Intel® Driver & Support Assistant Advisory
Summary: A potential security vulnerability in the Intel® Driver & Support Assistant may allow information disclosure. Intel is releasing Driver & Support Assistant updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2018-3621 Description: Insufficient input...
Intel® Trace Analyzer 2018 Advisory
Summary: A potential security vulnerability in Intel® Trace Analyzer 2018 in Intel® Parallel Studio XE 2018 may allow an authenticated user to escalate privileges via a local vector. Intel is releasing Intel® Parallel Studio XE 2018 updates to mitigate this potential vulnerability. Vulnerability...
Intel® RAID Web Console 3 Cross-site Scripting Vulnerability Advisory
Summary: A potential security vulnerability in the Intel® RAID Web Console RWC may allow remote manipulation of RWC console output. Intel is releasing RAID Web Console updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2018-3699 Description: Cross-site scripting i...
Intel® Rapid Store Technology Installer Advisory
Summary: A potential security vulnerability in Intel® Rapid Store Technology RST installer may allow an unprivileged user to potentially elevate privileges or cause an installer denial of service. Intel is releasing Intel® RST installer updates to mitigate this potential vulnerability...
Intel® RAID Web Console 3 for Windows* Authentication Bypass Advisory
Summary: A potential security vulnerability in Intel® RAID Web Console 3 for Windows may allow information disclosure. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2018-3696 Description: Authentication bypass in the IntelR RAID We...
Intel® PROSet/Wireless WiFi Software Advisory
Summary: Multiple potential security vulnerabilities in Cisco Compatible eXtensions CCX component in Intel® PROSet/Wireless WiFi Software may allow escalation of privilege, denial of service and/or information disclosure. Intel is releasing PROSet/Wireless WiFi Software updates to mitigate this...
Intel® Quartus Family of Tools Privilege Escalation Vulnerability
This advisory contains CVEs in Altera products and has been transferred to Altera for support. The updated advisory can be found at the link below: https://www.altera.com/product-security/advisory-archive/intel-sa-00151.html...
Intel® Server Board Firmware Advisory
Summary: A potential security vulnerability in Intel® Server Board Family products may allow information disclosure. Intel is releasing firmware updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2018-12172 Description: Improper password hashing in firmware in...
Intel® NUC Bios Updater Advisory
Summary: A potential security vulnerability in Intel® NUC EBU firmware update executable may allow denial of service or information disclosure. Intel is releasing firmware kit updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2018-12158 Description: Insufficient...
Intel® RAID Web Server 3 Service Advisory
Summary: A potential security vulnerability in the Intel® Raid Web Server 3 may allow information disclosure. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2018-12161 Description: Insufficient session validation in the webserver...
Intel® Graphics Driver Unified Shader Compiler Advisory
Summary: Multiple potential security vulnerabilities in Intel® Graphics Drivers may allow escalation of privilege or denial of service . Intel is releasing Intel® Graphics Driver updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2018-12152 Description: Pointer...
Intel® Platform Trust Technology (PTT) Update Advisory
Summary: A potential vulnerability in the Intel® PTT module in Intel® CSME firmware and Intel® TXE firmware may allow information disclosure. Intel is releasing Intel® CSME firmware and Intel® TXE firmware updates to mitigate this potential vulnerability. Vulnerability Details CVEID: CVE-2018-365...
Intel® Server Board TPM Advisory
Summary: A potential security vulnerability in Intel® Server Boards may allow information disclosure. Intel is releasing Intel® Server Board firmware updates to mitigate this potential vulnerability. Vulnerability Details CVEID: CVE-2017-15361 Description: Information disclosure in Infineon TPM i...
Intel® Data Center Manager SDK Advisory
Summary: Potential security vulnerability in Intel® Data Center Manager SDK may allow privilege escalation. Intel is releasing Intel® Data Center Manager updates to mitigate this potential vulnerability. Vulnerability Details CVEID: CVE-2018-3679 Description: Escalation of privilege in Reference ...
Intel® Centrino® Wireless-N and Intel® Centrino® Advanced-N products Bluetooth Driver Advisory
Summary: A potential security vulnerability in ibtfltcoex.sys driver for Intel® Centrino® Wireless adapters may allow denial of service. Vulnerability Details: CVEID: CVE-2018-3669 Description: A STOP error BSoD in the ibtfltcoex.sys driver for Intel® Centrino® Wireless N and Intel® Centrino®...
Intel® Active Management Technology 9.x/10.x/11.x/12.x Security Review Cumulative Update Advisory
Summary: Multiple potential security vulnerabilities in Intel® Active Management Technology AMT in Intel® CSME firmware may allow arbitrary code execution, a partial denial of service or information disclosure. Intel is releasing Intel® CSME firmware updates to mitigate these potential...
Intel® Data Migration Software Improper Permissions Advisory
Summary: A potential security vulnerability in Intel® Data Migration Software may allow Escalation of Privilege. Intel is releasing Intel® Data Migration Software updates to mitigate this potential vulnerability. Vulnerability Details CVEID: CVE-2018-12160 Description: DLL injection vulnerability...
Intel® Driver & Support Assistant and Intel® Software Asset Manager Advisory
Summary: Potential security vulnerabilities in Intel® Driver & Support Assistant, Intel® Software Asset Manager and Intel® Computing Improvement Program may allow escalation of privilege. Intel is releasing Intel® Driver & Support Assistant updates to mitigate these potential vulnerabilities...
Intel® Baseboard Management Controller (BMC) firmware Advisory
Summary: A potential security vulnerability in Intel® Baseboard Management Controller BMC firmware may allow escalation of privilege or denial of service. Intel is releasing updates for Intel® Baseboard Management Controller BMC firmware to mitigate this potential vulnerability. Vulnerability...
INTEL-SA-00086 Detection Tool DLL Injection Issue Advisory
Summary: A potential security vulnerability in the INTEL-SA-00086 Detection Tool may allow a privileged user to execute arbitrary code. Intel is releasing INTEL-SA-00086 Detection Tool updates to mitigate this potential vulnerability. Vulnerability Details CVEID: CVE-2018-3686 Description: Code...
Intel® NUC Firmware Security Advisory
Summary: A potential security vulnerability in firmware for Intel® NUC may allow information disclosure, escalation of privilege and/or denial of service. Intel® is releasing firmware security updates for Intel® NUC Firmware to mitigate this potential vulnerability. Vulnerability Details CVEID:...
Intel® IoT Developers Kit Permissions Advisory
Summary: A potential security vulnerability in Intel® IoT Developers Kit may allow escalation of privilege. Intel is releasing IoT Developers Kit updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2018-12163 Description: A DLL injection vulnerability in the Intel...
Intel® Puma™ Chipset Denial of Service Vulnerabilities
None...
Intel® Smart Sound Technology vulnerabilities
Summary: CVE-2018-3666 • Driver module in Intel Smart Sound Technology before version 9.21.00.3541 potentially allows a local attacker to execute arbitrary code as administrator via a non-paged pool overflow. • 7.5 High CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H CVE-2018-3670 • Driver module in...
Bluetooth® pairing vulnerability
Summary: Bluetooth Pairing update. Description: A vulnerability in Bluetooth® pairing potentially allows an attacker with physical proximity within 30 meters to gain unauthorized access via an adjacent network, intercept traffic and send forged pairing messages between two vulnerable Bluetooth®...
Firmware Authentication Bypass
Summary: Potential security vulnerability allowing bypass of firmware authentication and incorrect TPM measurement of system firmware. Description: Platform sample code firmware included with 4th Gen Intel® Core™ Processor Haswell, 5th Gen Intel® Core™ Processor Broadwell, 6th Gen Intel® Core™...
Intel® Optane™ memory module update
Summary: Information disclosure vulnerability in storage media in systems with Intel® Optane™ memory module with Whole Disk Encryption may allow an attacker to recover data via physical access. Description: Intel identified an issue where some systems configured with Whole Disk Encryption and an...
Insecure Handling of BIOS and AMT Passwords
Summary: Intel is releasing patches to mitigate security vulnerability CVE-2017-5704 Description: Platform sample code firmware included with 4th Gen Intel® Core™ Processor Haswell, 5th Gen Intel® Core™ Processor Broadwell, 6th Gen Intel® Core™ Processor Skylake, and 7th Gen Intel® Core™ Processo...
Platform firmware included insecure handling of certain UEFI variables
Summary: This update improves the security of the firmware and the ability to enable secure configuration. Description: Insecure handling of UEFI variables in Intel® Xeon® Scalable processors, Intel® Xeon® Processor E5 v4 Family, Intel® Xeon® Processor E5 v3 Family system firmware potentially...
Intel® Converged Security Management Engine (Intel® CSME) 11.x issue
Summary: In an effort to continuously improve the robustness of the Intel® Converged Security Management Engine Intel® CSME, Intel has performed a security review of its Intel® CSME with the objective of continuously enhancing firmware resilience. Description: In an effort to continuously improve...
Intel® Quartus® Prime Pro
This advisory contains CVEs in Altera products and has been transferred to Altera for support. The updated advisory can be found at the link below: https://www.altera.com/product-security/advisory-archive/intel-sa-00157.html...
Insufficient Input Validation in Intel® VTune Amplifier, Intel® Advisor and Intel® Inspector products before version 2018 Update 3 potentially allows an unprivileged user to trigger a Denial of Service via local vector
None...
Insufficient Input Validation in Bleach module in Intel® Distribution for Python (IDP) version IDP 2018 Update 2 potentially allows an unprivileged user to bypass URI sanitization and cause a Denial of Service via local vector
Summary: Insufficient Input Validation in Bleach module in Intel® Distribution for Python IDP version IDP 2018 Update 2 potentially allows an unprivileged user to bypass URI sanitization and cause a Denial of Service via local vector. Description: A vulnerable version of the Mozilla Bleach librar...
EDK II Untested memory not covered by SMM page protection
Summary: Intel is releasing firmware updates to improve System Management Mode SMM protection. Description: Incorrect handling of memory types in Tianocore firmware potentially allows a local attacker to bypass SMM protections on memory. • High 8.2 CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H...
BMC Firmware Vulnerability Intel Server Boards, Compute Modules and Systems
Summary: BMC Firmware in Intel server boards, compute modules, and systems potentially allow an attacker with administrative privileges to make unauthorized read\writes to the SMBUS. • 8.2 High CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H Affected products: Product Type | Product Name | MM...