Vulnerabilities > Intel

DATE CVE VULNERABILITY TITLE RISK
2023-11-14 CVE-2023-39230 Incorrect Permission Assignment for Critical Resource vulnerability in Intel Rapid Storage Technology
Insecure inherited permissions in some Intel Rapid Storage Technology software before version 16.8.5.1014.9 may allow an authenticated user to potentially enable escalation of privilege via local access.
local
low complexity
intel CWE-732
7.8
2023-11-14 CVE-2023-39411 Improper Input Validation vulnerability in Intel Unison Software 20.14.2.3053/20.14.4244
Improper input validationation for some Intel Unison software may allow a privileged user to potentially enable denial of service via local access.
local
low complexity
intel CWE-20
4.4
2023-11-14 CVE-2023-39412 Cross-Site Request Forgery (CSRF) vulnerability in Intel Unison Software 20.14.2.3053/20.14.4244
Cross-site request forgery in some Intel Unison software may allow an authenticated user to potentially enable escalation of privilege via network access.
network
low complexity
intel CWE-352
8.8
2023-11-14 CVE-2023-40220 Unspecified vulnerability in Intel Nuc6Cayh Firmware and Nuc6Cays Firmware
Improper buffer restrictions in some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable information disclosure via local access.
local
low complexity
intel
4.4
2023-11-14 CVE-2023-40540 Unspecified vulnerability in Intel products
Non-Transparent Sharing of Microarchitectural Resources in some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable information disclosure via local access.
local
low complexity
intel
4.4
2023-09-27 CVE-2023-44216 Information Exposure Through Discrepancy vulnerability in multiple products
PVRIC (PowerVR Image Compression) on Imagination 2018 and later GPU devices offers software-transparent compression that enables cross-origin pixel-stealing attacks against feTurbulence and feBlend in the SVG Filter specification, aka a GPU.zip issue.
5.3
2023-08-15 CVE-2023-24478 Use of Insufficiently Random Values vulnerability in Intel Quartus Prime
Use of insufficiently random values for some Intel Agilex(R) software included as part of Intel(R) Quartus(R) Prime Pro Edition for linux before version 22.4 may allow an authenticated user to potentially enable information disclosure via local access.
local
low complexity
intel CWE-330
5.5
2023-08-11 CVE-2022-25864 Uncontrolled Search Path Element vulnerability in Intel Oneapi Math Kernel Library
Uncontrolled search path in some Intel(R) oneMKL software before version 2022.0 may allow an authenticated user to potentially enable escalation of privilege via local access.
local
low complexity
intel CWE-427
7.8
2023-08-11 CVE-2022-27635 Improper access control for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi software may allow a privileged user to potentially enable escalation of privilege via local access.
local
low complexity
intel fedoraproject debian
6.7
2023-08-11 CVE-2022-27879 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Intel products
Improper buffer restrictions in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable information disclosure via local access.
local
low complexity
intel CWE-119
4.4