CVE-2022-32579

CVE-2022-32579 affects Intel NUC Laptop Kits with firmware before BC0076. Root cause: improper initialization in the firmware, enabling privilege escalation for a user with physical or local access. Impact: potential elevation of privileges with high Confidentiality/Integrity/Availability impact;...

CVE-2022-24297

CVE-2022-24297 is a vulnerability in some Intel\u00ae NUC firmware described as an improper buffer restriction that may allow a privileged user to gain escalation of privilege via local access. The issue is documented in Intel’s advisory (Intel SA-00654) and the NVD entry confirms local access wi...

CVE-2022-21237

CVE-2022-21237 affects Intel® NUC firmware with an improper buffer access issue that could allow a local, privileged escalation. Intel’s advisory (INTEL-SA-00654) lists affected NUC BIOS/firmware and provides mitigations via updated firmware versions. The vulnerability is local, requires no user ...

CVE-2022-27493

CVE-2022-27493 affects firmware in some Intel NUC Laptop Kits prior to BC0076, enabling local privilege escalation via improper initialization. The vulnerability is a firmware issue in the device initialization path that could be exploited by a privileged local user. Intel’s advisory (Intel SA-00...

CVE-2022-34345

CVE-2022-34345 affects Intel® NUC Laptop Kits firmware prior to version BC0076, where improper input validation may allow a privileged user to escalate privileges via physical/local access. The vulnerability impact, as stated, is a high level of confidentiality/ integrity/ availability risk (C/H ...

CVE-2022-28858

CVE-2022-28858 affects Intel NUC Laptop Kits with firmware prior to BC0076, where an improper buffer restriction could allow a privileged user to escalate privileges via local access. The Intel advisory INTEL-SA-00712 confirms the issue and provides mitigations through firmware BIOS updates to af...

CVE-2021-0056

CVE-2021-0056 affects Intel® NUC M15 Laptop Kit Driver Pack prior to version 1.1. The issue is insecure inherited permissions in the Driver Pack software that may allow an authenticated user to escalate privileges via local access. Intel and RH Red Hat advisories confirm the affected product and ...

CVE-2022-24382

CVE-2022-24382 is an Intel NUC firmware vulnerability caused by improper input validation that could allow a privileged user to escalate privileges via local access. The connected Intel advisory confirms the issue, attributes a local-exploit requirement (low attack complexity) and provides a high...

CVE-2022-34488

CVE-2022-34488 affects Intel NUC Laptop Kits firmware prior to BC0076 where improper buffer restrictions could allow a local-privilege escalation. Root cause: firmware boundary restrictions enabling privilege elevation with local access. Affected products: Intel NUC Laptop Kits (pre-BC0076). Impa...

CVE-2022-33209

CVE-2022-33209 affects Intel® NUC Laptop Kits firmware prior to BC0076, where improper input validation may allow a privileged user to escalate privileges via local access. The issue is documented in Intel’s advisory (Intel SA-00712) alongside related CVEs for the same firmware family. Public sou...

CVE-2021-0057

CVE-2021-0057 is an issue in the Intel® NUC M15 Laptop Kit Driver Pack software (before 1.1) that allows an authenticated local user to potentially escalate privileges due to an uncontrolled search path. Red Hat/NVD/NVDA sources corroborate the same description. The Intel advisory (intel-sa-00507...

CVE-2022-37327

CVE-2022-37327 describes improper input validation in Intel NUC BIOS firmware (across multiple NUC elements and kits) that may allow a privileged local user to cause information disclosure. Connected sources confirm affected products include various Intel NUC firmware components (e.g., NUC 8/11/1...

CVE-2021-0058

The CVE-2021-0058 issue affects the Intel NUC M15 Laptop Kit Driver Pack prior to version 1.1. The root cause is incorrect default permissions in the driver software, which may allow an authenticated local user to escalate privileges. The advisory (Intel SA-00507) and related Red Hat/NVD records ...

CVE-2022-31477

CVE-2022-31477 affects Intel® NUC BIOS firmware: improper initialization may allow a privileged local user to disclose information. Red Hat and NVD entries mirror this Intel NUC BIOS firmware issue; Intel advisory INTEL-SA-00777 lists CVE-2022-31477 among several related fixes. The Red Hat and NV...