CVE-2024-21835

CVE-2024-21835 concerns Intel® XTU software prior to version 7.14.0.15, where insecure inherited permissions may allow an authenticated user to escalate privileges via local access. The root cause is insecure inherited permissions, enabling local privilege escalation. Affected product: Intel® XTU...

CVE-2018-12150

Intel® Extreme Tuning Utility (Intel XTU) : The connected Intel advisory documents confirm a vulnerability in the Installer component of Intel XTU prior to version 6.4.1.21 that may allow an authenticated user to escalate privileges and potentially execute code or disclose information as an admin...

CVE-2018-12151

Intel XTU installer before 6.4.1.21 contains a buffer overflow that may be triggerable by an authenticated local user, potentially leading to a denial of service. The vulnerability is documented as CVE-2018-12151 and is acknowledged in Intel’s INTEL-SA-00162 advisory, which also notes affected pr...

CVE-2022-22139

The CVE-2022-22139 entry concerns Intel XTU (Intel® Extreme Tuning Utility) software prior to version 7.3.0.33. The vulnerability is an Uncontrolled search path that may allow an authenticated, local attacker to escalate privileges. Affected products are explicitly Intel XTU before 7.3.0.33. The ...

CVE-2018-12149

Intel Extreme Tuning Utility (Intel XTU) before 6.4.1.21 is affected by a buffer overflow in input handling that may allow an authenticated user with local access to cause a denial of service. The CVE is CVE-2018-12149. The Intel advisory INTEL-SA-00162 notes the vulnerability and recommends upda...

CVE-2020-12350

Intel XTU has a vulnerability CVE-2020-12350 (Intel XTU before 6.5.1.360) that allows an authenticated local user to escalate privileges due to improper access control. The issue is addressed by updating to version 6.5.1.360 or later (Intel advisory INTEL-SA-00429). The CVSS scores indicate high ...

CVE-2023-34350

CVE-2023-34350 affects Intel XTU software prior to version 7.12.0.15. The vulnerability is an uncontrolled search path element that could allow an authenticated local attacker to escalate privileges. Intel and Red Hat/HP advisories confirm the issue and recommend upgrading to Intel XTU 7.12.0.15 ...

CVE-2023-28407

CVE-2023-28407 concerns an uncontrolled search path vulnerability in some Intel® XTU software prior to version 7.12.0.29, potentially allowing an authenticated user to escalate privileges via local access. The issue is documented in Intel’s advisory and Red Hat/NVD entries, which specify the affe...

CVE-2023-32647

CVE-2023-32647 describes an "improper access control" in Intel® XTU software prior to version 7.12.0.29 that may allow an authenticated local user to escalate privileges. Affected product: Intel XTU software before 7.12.0.29. Root cause: improper access control. Impact: local privilege escalation...

CVE-2020-24480

The CVE-2020-24480 entry corresponds to an out-of-bounds write in Intel® XTU prior to 6.5.3.25 that may allow a privileged local attacker to cause a denial of service. Reports across multiple sources (NVD, Red Hat, CVE lists, and Intel’s advisory) confirm affected product: Intel® XTU before 6.5.3...

CVE-2023-38561

Intel XTU software prior to version 7.12.0.29 suffers improper access control that may allow an authenticated local user to escalate privileges. Affects Intel XTU versions before 7.12.0.29; CVEs include CVE-2023-32647, CVE-2023-28407, and CVE-2023-38561. Mitigation: update to 7.12.0.29 or later. ...