Vulnerabilities > Intel

DATE CVE VULNERABILITY TITLE RISK
2018-04-03 CVE-2018-3641 Unspecified vulnerability in Intel Remote Keyboard Mobile APP
Escalation of privilege in all versions of the Intel Remote Keyboard allows a network attacker to inject keystrokes as a local user.
network
low complexity
intel
critical
9.8
2018-04-03 CVE-2018-3638 Unspecified vulnerability in Intel Remote Keyboard Mobile APP
Escalation of privilege in all versions of the Intel Remote Keyboard allows an authorized local attacker to execute arbitrary code as a privileged user.
local
low complexity
intel
7.8
2018-04-03 CVE-2017-5703 Improper Privilege Management vulnerability in Intel products
Configuration of SPI Flash in platforms based on multiple Intel platforms allow a local attacker to alter the behavior of the SPI flash potentially leading to a Denial of Service.
local
low complexity
intel CWE-269
6.0
2018-04-03 CVE-2018-3689 Unspecified vulnerability in Intel Software Guard Extensions
AESM daemon in Intel Software Guard Extensions Platform Software Component for Linux before 2.1.102 can effectively be disabled by a local attacker creating a denial of services like remote attestation provided by the AESM.
local
low complexity
intel
5.5
2018-03-27 CVE-2018-9056 Information Exposure vulnerability in multiple products
Systems with microprocessors utilizing speculative execution may allow unauthorized disclosure of information to an attacker with local user access via a side-channel attack on the directional branch predictor, as demonstrated by a pattern history table (PHT), aka BranchScope.
local
high complexity
intel arm CWE-200
5.6
2018-03-26 CVE-2014-2312 Link Following vulnerability in Intel Thermald
The main function in android_main.cpp in thermald allows local users to write to arbitrary files via a symlink attack on /tmp/thermald.pid.
local
low complexity
intel CWE-59
5.5
2018-03-20 CVE-2018-3626 Information Exposure vulnerability in Intel SGX SDK
Edger8r tool in the Intel SGX SDK before version 2.1.2 (Linux) and 1.9.6 (Windows) may generate code that is susceptible to a side channel potentially allowing a local user to access unauthorized information.
local
high complexity
intel CWE-200
4.7
2018-03-20 CVE-2017-5736 Improper Privilege Management vulnerability in Intel Software Guard Extensions Platform Software Component
An elevation of privilege in Intel Software Guard Extensions Platform Software Component before 1.9.105.42329 allows a local attacker to execute arbitrary code as administrator.
local
low complexity
intel CWE-269
8.8
2018-02-02 CVE-2017-5727 NULL Pointer Dereference vulnerability in Intel Graphics Driver
Pointer dereference in subsystem in Intel Graphics Driver 15.40.x.x, 15.45.x.x, 15.46.x.x allows unprivileged user to elevate privileges via local access.
local
low complexity
intel CWE-476
7.8
2018-01-23 CVE-2015-1142857 7PK - Security Features vulnerability in multiple products
On multiple SR-IOV cars it is possible for VF's assigned to guests to send ethernet flow control pause frames via the PF.
network
low complexity
intel linux dpdk CWE-254
8.6