Vulnerabilities > Intel

DATE CVE VULNERABILITY TITLE RISK
2023-05-10 CVE-2022-37327 Unspecified vulnerability in Intel products
Improper input validation in BIOS firmware for Intel(R) NUC, Intel(R) NUC Performance Kit, Intel(R) NUC Performance Mini PC, Intel(R) NUC 8 Compute Element, Intel(R) NUC Pro Kit, Intel(R) NUC Pro Board, Intel(R) NUC 11 Compute Element, Intel(R) NUC 12 Compute Element, Intel(R) NUC Extreme, Intel(R) NUC 12 Extreme Compute Element, Intel(R) NUC Laptop Kit, Intel(R) NUC Enthusiast, Intel(R) NUC Essential, Intel(R) NUC Laptop Kit, Intel(R) NUC Extreme Compute Element, Intel(R) NUC Boards, Intel(R) NUC Pro Compute Element, Intel(R) NUC Rugged may allow a privileged user to enable information disclosure via local access.
local
low complexity
intel
5.5
2023-05-10 CVE-2022-37409 Unspecified vulnerability in Intel Integrated Performance Primitives Cryptography
Insufficient control flow management for the Intel(R) IPP Cryptography software before version 2021.6 may allow an authenticated user to potentially enable information disclosure via local access.
local
low complexity
intel
5.5
2023-05-10 CVE-2022-38087 Exposure of Resource to Wrong Sphere vulnerability in Intel products
Exposure of resource to wrong sphere in BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable information disclosure via local access.
local
low complexity
intel CWE-668
5.5
2023-05-10 CVE-2022-38101 Unquoted Search Path or Element vulnerability in Intel Iflashv
Uncontrolled search path in some Intel(R) NUC Chaco Canyon BIOS update software before version iFlashV Windows 5.13.00.2105 may allow an authenticated user to potentially enable escalation of privilege via local access.
local
low complexity
intel CWE-428
7.8
2023-05-10 CVE-2022-38103 Incorrect Permission Assignment for Critical Resource vulnerability in Intel NUC Software Studio Service
Insecure inherited permissions in the Intel(R) NUC Software Studio Service installer before version 1.17.38.0 may allow an authenticated user to potentially enable escalation of privilege via local access
local
low complexity
intel CWE-732
7.8
2023-05-10 CVE-2022-38787 Unspecified vulnerability in Intel products
Improper input validation in firmware for some Intel(R) FPGA products before version 2.7.0 Hotfix may allow an authenticated user to potentially enable escalation of privilege via local access.
local
low complexity
intel
7.8
2023-05-10 CVE-2022-40207 Unspecified vulnerability in Intel System Usage Report
Improper access control in the Intel(R) SUR software before version 2.4.8989 may allow an authenticated user to potentially enable escalation of privilege via local access.
local
low complexity
intel
7.8
2023-05-10 CVE-2022-40210 Exposure of Resource to Wrong Sphere vulnerability in Intel Data Center Manager
Exposure of data element to wrong session in the Intel DCM software before version 5.0.1 may allow an authenticated user to potentially enable escalation of privilege via local access.
local
low complexity
intel CWE-668
7.8
2023-05-10 CVE-2022-40685 Insufficiently Protected Credentials vulnerability in Intel Data Center Manager
Insufficiently protected credentials in the Intel(R) DCM software before version 5.0.1 may allow an authenticated user to potentially enable information disclosure via network access.
network
low complexity
intel CWE-522
6.5
2023-05-10 CVE-2022-40971 Incorrect Default Permissions vulnerability in Intel NUC Hdmi Firmware Update Tool 1.78.2.0.7
Incorrect default permissions for the Intel(R) HDMI Firmware Update Tool for NUC before version 1.79.1.1 may allow an authenticated user to potentially enable escalation of privilege via local access.
local
low complexity
intel CWE-276
7.8