Lucene search

K

Intel Security Vulnerabilities

cve
cve

CVE-2020-12291

Uncontrolled resource consumption in some Intel(R) Thunderbolt(TM) controllers may allow an authenticated user to potentially enable denial of service via local access.

5.5CVSS

5.2AI Score

0.0004EPSS

2021-06-09 07:15 PM
24
17
cve
cve

CVE-2020-12292

Improper conditions check in some Intel(R) Thunderbolt(TM) controllers may allow an authenticated user to potentially enable denial of service via local access.

5.5CVSS

5.2AI Score

0.0004EPSS

2021-06-09 07:15 PM
30
14
cve
cve

CVE-2020-12293

Improper control of a resource through its lifetime in some Intel(R) Thunderbolt(TM) controllers may allow an authenticated user to potentially enable denial of service via local access.

5.5CVSS

5.2AI Score

0.0004EPSS

2021-06-09 07:15 PM
22
14
cve
cve

CVE-2020-12294

Insufficient control flow management in some Intel(R) Thunderbolt(TM) controllers may allow an authenticated user to potentially enable denial of service via local access.

5.5CVSS

5.1AI Score

0.0004EPSS

2021-06-09 07:15 PM
20
13
cve
cve

CVE-2020-12295

Improper input validation in some Intel(R) Thunderbolt(TM) controllers may allow an authenticated user to potentially enable denial of service via local access.

5.5CVSS

5.2AI Score

0.0004EPSS

2021-06-09 07:15 PM
28
12
cve
cve

CVE-2020-12296

Uncontrolled resource consumption in some Intel(R) Thunderbolt(TM) controllers may allow an authenticated user to potentially enable denial of service via local access.

5.5CVSS

5.2AI Score

0.0004EPSS

2021-06-09 07:15 PM
30
15
cve
cve

CVE-2020-12297

Improper access control in Installer for Intel(R) CSME Driver for Windows versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70, 13.0.40, 13.30.10, 14.0.45 and 14.5.25, Intel TXE 3.1.80, 4.0.30 may allow an authenticated user to potentially enable escalation of privileges via local access.

7.8CVSS

7.6AI Score

0.0004EPSS

2020-11-12 06:15 PM
54
cve
cve

CVE-2020-12299

Improper input validation in BIOS firmware for Intel(R) Server Board Families S2600ST, S2600BP and S2600WF may allow a privileged user to potentially enable escalation of privilege via local access.

8.2CVSS

8.1AI Score

0.0004EPSS

2020-08-13 04:15 AM
28
cve
cve

CVE-2020-12300

Uninitialized pointer in BIOS firmware for Intel(R) Server Board Families S2600CW, S2600KP, S2600TP, and S2600WT may allow a privileged user to potentially enable escalation of privilege via local access.

8.2CVSS

8.1AI Score

0.0004EPSS

2020-08-13 04:15 AM
30
cve
cve

CVE-2020-12301

Improper initialization in BIOS firmware for Intel(R) Server Board Families S2600ST, S2600BP and S2600WF may allow a privileged user to potentially enable escalation of privilege via local access.

8.2CVSS

8.1AI Score

0.0004EPSS

2020-08-13 04:15 AM
30
cve
cve

CVE-2020-12302

Improper permissions in the Intel(R) Driver & Support Assistant before version 20.7.26.7 may allow an authenticated user to potentially enable escalation of privilege via local access.

7.8CVSS

7.7AI Score

0.0004EPSS

2020-10-05 02:15 PM
23
cve
cve

CVE-2020-12303

Use after free in DAL subsystem for Intel(R) CSME versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70, 13.0.40, 13.30.10, 14.0.45 and 14.5.25, Intel(R) TXE 3.1.80, 4.0.30 may allow an authenticated user to potentially enable escalation of privileges via local access.

7.8CVSS

7.9AI Score

0.0004EPSS

2020-11-12 06:15 PM
54
cve
cve

CVE-2020-12304

Improper access control in Installer for Intel(R) DAL SDK before version 2.1 for Windows may allow an authenticated user to potentially enable escalation of privileges via local access.

7.8CVSS

7.6AI Score

0.0004EPSS

2020-11-12 06:15 PM
34
cve
cve

CVE-2020-12306

Incorrect default permissions in the Intel(R) RealSense(TM) D400 Series Dynamic Calibration Tool before version 2.11, may allow an authenticated user to potentially enable escalation of privilege via local access.

7.8CVSS

7.7AI Score

0.0004EPSS

2020-11-12 06:15 PM
16
cve
cve

CVE-2020-12307

Improper permissions in some Intel(R) High Definition Audio drivers before version 9.21.00.4561 may allow an authenticated user to potentially enable escalation of privilege via local access.

7.8CVSS

7.7AI Score

0.0004EPSS

2020-11-12 06:15 PM
25
cve
cve

CVE-2020-12308

Improper access control for the Intel(R) Computing Improvement Program before version 2.4.5982 may allow an unprivileged user to potentially enable information disclosure via network access.

6.5CVSS

6.2AI Score

0.001EPSS

2020-11-12 06:15 PM
13
cve
cve

CVE-2020-12309

Insufficiently protected credentialsin subsystem in some Intel(R) Client SSDs and some Intel(R) Data Center SSDs may allow an unauthenticated user to potentially enable information disclosure via physical access.

4.6CVSS

5AI Score

0.001EPSS

2020-11-12 06:15 PM
32
cve
cve

CVE-2020-12310

Insufficient control flow managementin firmware in some Intel(R) Client SSDs and some Intel(R) Data Center SSDs may allow an unauthenticated user to potentially enable information disclosure via physical access.

4.6CVSS

5AI Score

0.001EPSS

2020-11-12 06:15 PM
30
cve
cve

CVE-2020-12311

Insufficient control flow managementin firmware in some Intel(R) Client SSDs and some Intel(R) Data Center SSDs may allow an unauthenticated user to potentially enable information disclosure via physical access.

4.6CVSS

5AI Score

0.001EPSS

2020-11-12 06:15 PM
37
cve
cve

CVE-2020-12312

Improper buffer restrictions in the Intel(R) Stratix(R) 10 FPGA firmware provided with the Intel(R) Quartus(R) Prime Pro software before version 20.2 may allow an unauthenticated user to potentially enable escalation of privilege via physical access.

6.8CVSS

6.9AI Score

0.001EPSS

2020-11-12 06:15 PM
26
4
cve
cve

CVE-2020-12313

Insufficient control flow management in some Intel(R) PROSet/Wireless WiFi products before version 21.110 may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access.

8.8CVSS

8.8AI Score

0.001EPSS

2020-11-13 08:15 PM
48
cve
cve

CVE-2020-12314

Improper input validation in some Intel(R) PROSet/Wireless WiFi products before version 21.110 may allow an unauthenticated user to potentially enable denial of service via adjacent access.

6.5CVSS

6.8AI Score

0.001EPSS

2020-11-12 06:15 PM
24
cve
cve

CVE-2020-12315

Path traversal in the Intel(R) EMA before version 1.3.3 may allow an unauthenticated user to potentially enable escalation of privilege via network access.

9.8CVSS

9.6AI Score

0.003EPSS

2020-11-12 07:15 PM
28
cve
cve

CVE-2020-12316

Insufficiently protected credentials in the Intel(R) EMA before version 1.3.3 may allow an authorized user to potentially enable information disclosure via local access.

5.5CVSS

5.2AI Score

0.0004EPSS

2020-11-12 07:15 PM
25
cve
cve

CVE-2020-12317

Improper buffer restriction in some Intel(R) PROSet/Wireless WiFi products before version 21.110 may allow an unauthenticated user to potentially enable denial of service via adjacent access.

6.5CVSS

6.8AI Score

0.001EPSS

2020-11-12 06:15 PM
34
cve
cve

CVE-2020-12318

Protection mechanism failure in some Intel(R) PROSet/Wireless WiFi products before version 21.110 may allow an authenticated user to potentially enable escalation of privilege via local access.

7.8CVSS

7.8AI Score

0.0004EPSS

2020-11-12 06:15 PM
22
cve
cve

CVE-2020-12319

Insufficient control flow management in some Intel(R) PROSet/Wireless WiFi products before version 21.110 may allow an unauthenticated user to potentially enable denial of service via adjacent access.

6.5CVSS

6.7AI Score

0.001EPSS

2020-11-12 06:15 PM
31
cve
cve

CVE-2020-12320

Uncontrolled search path in Intel(R) SCS Add-on for Microsoft* SCCM before version 2.1.10 may allow an authenticated user to potentially enable escalation of privilege via local access.

7.8CVSS

7.7AI Score

0.0004EPSS

2020-11-12 07:15 PM
22
cve
cve

CVE-2020-12321

Improper buffer restriction in some Intel(R) Wireless Bluetooth(R) products before version 21.110 may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access.

8.8CVSS

8.8AI Score

0.001EPSS

2020-11-12 06:15 PM
356
cve
cve

CVE-2020-12322

Improper input validation in some Intel(R) Wireless Bluetooth(R) products before version 21.110 may allow an unauthenticated user to potentially enable denial of service via adjacent access.

6.5CVSS

7.2AI Score

0.001EPSS

2020-11-12 06:15 PM
25
cve
cve

CVE-2020-12323

Improper input validation in the Intel(R) ADAS IE before version ADAS_IE_1.0.766 may allow a privileged user to potentially enable escalation of privilege via local access.

6.7CVSS

6.6AI Score

0.0004EPSS

2020-11-12 07:15 PM
29
cve
cve

CVE-2020-12324

Protection mechanism failure in some Intel(R) Thunderbolt(TM) DCH drivers for Windows* before version 72 may allow an authenticated user to potentially enable escalation of privilege via local access.

7.8CVSS

7.6AI Score

0.0004EPSS

2020-11-12 07:15 PM
31
cve
cve

CVE-2020-12325

Improper buffer restrictions in some Intel(R) Thunderbolt(TM) DCH drivers for Windows* before version 72 may allow an authenticated user to potentially enable escalation of privilege via local access.

7.8CVSS

7.8AI Score

0.0004EPSS

2020-11-12 07:15 PM
30
cve
cve

CVE-2020-12326

Improper initialization in some Intel(R) Thunderbolt(TM) DCH drivers for Windows* before version 72 may allow an authenticated user to potentially enable information disclosure via local access.

5.5CVSS

5.5AI Score

0.0004EPSS

2020-11-12 07:15 PM
33
cve
cve

CVE-2020-12327

Insecure default variable initialization in some Intel(R) Thunderbolt(TM) DCH drivers for Windows* before version 72 may allow a privileged user to potentially enable information disclosure via local access.

4.4CVSS

4.9AI Score

0.0004EPSS

2020-11-12 07:15 PM
30
cve
cve

CVE-2020-12328

Protection mechanism failure in some Intel(R) Thunderbolt(TM) DCH drivers for Windows* before version 72 may allow a privileged user to potentially enable information disclosure via local access.

4.4CVSS

4.8AI Score

0.0004EPSS

2020-11-12 07:15 PM
38
cve
cve

CVE-2020-12329

Uncontrolled search path in the Intel(R) VTune(TM) Profiler before version 2020 Update 1 may allow an authenticated user to potentially enable escalation of privilege via local access.

7.8CVSS

7.7AI Score

0.0004EPSS

2020-11-12 07:15 PM
22
cve
cve

CVE-2020-12330

Improper permissions in the installer for the Intel(R) Falcon 8+ UAS AscTec Thermal Viewer, all versions, may allow an authenticated user to potentially enable escalation of privilege via local access.

7.8CVSS

7.7AI Score

0.0004EPSS

2020-11-12 07:15 PM
24
cve
cve

CVE-2020-12331

Improper access controls in Intel Unite(R) Cloud Service client before version 4.2.12212 may allow an authenticated user to potentially enable escalation of privilege via local access.

7.8CVSS

7.7AI Score

0.0004EPSS

2020-11-12 07:15 PM
30
cve
cve

CVE-2020-12332

Improper permissions in the installer for the Intel(R) HID Event Filter Driver, all versions, may allow an authenticated user to potentially enable escalation of privilege via local access.

7.8CVSS

7.7AI Score

0.0004EPSS

2020-11-12 07:15 PM
34
cve
cve

CVE-2020-12333

Insufficiently protected credentials in the Intel(R) QAT for Linux before version 1.7.l.4.10.0 may allow an authenticated user to potentially enable escalation of privilege via local access.

7.8CVSS

7.7AI Score

0.0004EPSS

2020-11-12 07:15 PM
22
cve
cve

CVE-2020-12334

Improper permissions in the installer for the Intel(R) Advisor tools before version 2020 Update 2 may allow an authenticated user to potentially enable escalation of privilege via local access.

7.8CVSS

7.7AI Score

0.0004EPSS

2020-11-12 07:15 PM
31
cve
cve

CVE-2020-12335

Improper permissions in the installer for the Intel(R) Processor Identification Utility before version 6.4.0603 may allow an authenticated user to potentially enable escalation of privilege via local access.

7.8CVSS

7.7AI Score

0.0004EPSS

2020-11-12 07:15 PM
28
cve
cve

CVE-2020-12336

Insecure default variable initialization in firmware for some Intel(R) NUCs may allow an authenticated user to potentially enable escalation of privilege via local access.

7.8CVSS

7.7AI Score

0.0004EPSS

2020-11-12 07:15 PM
24
cve
cve

CVE-2020-12337

Improper buffer restrictions in firmware for some Intel(R) NUCs may allow a privileged user to potentially enable escalation of privilege via local access.

6.7CVSS

6.7AI Score

0.0004EPSS

2020-11-12 07:15 PM
27
cve
cve

CVE-2020-12338

Insufficient control flow management in the Open WebRTC Toolkit before version 4.3.1 may allow an unauthenticated user to potentially enable escalation of privilege via network access.

9.8CVSS

9.6AI Score

0.002EPSS

2020-11-13 08:15 PM
36
cve
cve

CVE-2020-12339

Insufficient control flow management in the API for the Intel(R) Collaboration Suite for WebRTC before version 4.3.1 may allow an authenticated user to potentially enable escalation of privilege via network access.

8.8CVSS

8.7AI Score

0.001EPSS

2021-02-17 02:15 PM
19
cve
cve

CVE-2020-12345

Improper permissions in the installer for the Intel(R) Data Center Manager Console before version 3.6.2 may allow an authenticated user to potentially enable escalation of privilege via local access.

7.8CVSS

7.7AI Score

0.0004EPSS

2020-11-12 07:15 PM
20
cve
cve

CVE-2020-12346

Improper permissions in the installer for the Intel(R) Battery Life Diagnostic Tool before version 1.0.7 may allow an authenticated user to potentially enable escalation of privilege via local access.

7.8CVSS

7.7AI Score

0.0004EPSS

2020-11-12 07:15 PM
20
cve
cve

CVE-2020-12347

Improper input validation in the Intel(R) Data Center Manager Console before version 3.6.2 may allow an authenticated user to potentially enable escalation of privilege via network access.

8.8CVSS

8.7AI Score

0.001EPSS

2020-11-12 07:15 PM
27
Total number of security vulnerabilities1613