Vulnerabilities > Intel > High

DATE CVE VULNERABILITY TITLE RISK
2020-11-12 CVE-2020-12321 Unspecified vulnerability in Intel products
Improper buffer restriction in some Intel(R) Wireless Bluetooth(R) products before version 21.110 may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access.
low complexity
intel
8.8
2020-11-12 CVE-2020-12318 Unspecified vulnerability in Intel Proset/Wireless Wifi
Protection mechanism failure in some Intel(R) PROSet/Wireless WiFi products before version 21.110 may allow an authenticated user to potentially enable escalation of privilege via local access.
local
low complexity
intel
7.8
2020-11-12 CVE-2020-12307 Incorrect Default Permissions vulnerability in Intel High Definition Audio Driver
Improper permissions in some Intel(R) High Definition Audio drivers before version 9.21.00.4561 may allow an authenticated user to potentially enable escalation of privilege via local access.
local
low complexity
intel CWE-276
7.8
2020-11-12 CVE-2020-12306 Incorrect Default Permissions vulnerability in Intel Realsense D400 Series Dynamic Calibration Tool
Incorrect default permissions in the Intel(R) RealSense(TM) D400 Series Dynamic Calibration Tool before version 2.11, may allow an authenticated user to potentially enable escalation of privilege via local access.
local
low complexity
intel CWE-276
7.8
2020-11-12 CVE-2020-12304 Unspecified vulnerability in Intel Dynamic Application Loader Software Developement KIT
Improper access control in Installer for Intel(R) DAL SDK before version 2.1 for Windows may allow an authenticated user to potentially enable escalation of privileges via local access.
local
low complexity
intel
7.8
2020-11-12 CVE-2020-12303 Use After Free vulnerability in Intel products
Use after free in DAL subsystem for Intel(R) CSME versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70, 13.0.40, 13.30.10, 14.0.45 and 14.5.25, Intel(R) TXE 3.1.80, 4.0.30 may allow an authenticated user to potentially enable escalation of privileges via local access.
local
low complexity
intel CWE-416
7.8
2020-11-12 CVE-2020-12297 Unspecified vulnerability in Intel products
Improper access control in Installer for Intel(R) CSME Driver for Windows versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70, 13.0.40, 13.30.10, 14.0.45 and 14.5.25, Intel TXE 3.1.80, 4.0.30 may allow an authenticated user to potentially enable escalation of privileges via local access.
local
low complexity
intel
7.8
2020-11-12 CVE-2020-0590 Improper Input Validation vulnerability in multiple products
Improper input validation in BIOS firmware for some Intel(R) Processors may allow an authenticated user to potentially enable escalation of privilege via local access.
local
low complexity
intel netapp siemens CWE-20
7.8
2020-11-12 CVE-2019-11121 Incorrect Permission Assignment for Critical Resource vulnerability in Intel Media SDK 2018
Improper file permissions in the installer for the Intel(R) Media SDK for Windows before version 2019 R1 may allow an authenticated user to potentially enable escalation of privilege via local access.
local
low complexity
intel CWE-732
7.8
2020-10-29 CVE-2020-11616 Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) vulnerability in Intel BMC Firmware 1.06.06/2.47
NVIDIA DGX servers, all BMC firmware versions prior to 3.38.30, contain a vulnerability in the AMI BMC firmware in which the Pseudo-Random Number Generator (PRNG) algorithm used in the JSOL package that implements the IPMI protocol is not cryptographically strong, which may lead to information disclosure.
network
low complexity
intel CWE-338
7.5