Vulnerabilities > Intel > Medium

DATE CVE VULNERABILITY TITLE RISK
2019-05-17 CVE-2019-0098 Unspecified vulnerability in Intel products
Logic bug vulnerability in subsystem for Intel(R) CSME before version 12.0.35, Intel(R) TXE before 3.1.65, 4.0.15 may allow an unauthenticated user to potentially enable escalation of privilege via physical access.
low complexity
intel
6.8
2019-05-17 CVE-2019-0097 Improper Input Validation vulnerability in Intel Active Management Technology Firmware 12.0.20
Insufficient input validation vulnerability in subsystem for Intel(R) AMT before version 12.0.35 may allow a privileged user to potentially enable denial of service via network access.
network
low complexity
intel CWE-20
4.9
2019-05-17 CVE-2019-0094 Improper Input Validation vulnerability in Intel Active Management Technology Firmware
Insufficient input validation vulnerability in subsystem for Intel(R) AMT before versions 11.8.65, 11.11.65, 11.22.65, 12.0.35 may allow an unauthenticated user to potentially enable denial of service via adjacent network access.
low complexity
intel CWE-20
4.3
2019-05-17 CVE-2019-0093 Unspecified vulnerability in Intel Converged Security and Management Engine
Insufficient data sanitization vulnerability in HECI subsystem for Intel(R) CSME before versions 11.8.65, 11.11.65, 11.22.65, 12.0.35 and Intel(R) SPS before version SPS_E3_05.00.04.027.0 may allow a privileged user to potentially enable information disclosure via local access.
local
low complexity
intel
4.4
2019-05-17 CVE-2019-0092 Improper Input Validation vulnerability in Intel Active Management Technology Firmware
Insufficient input validation vulnerability in subsystem for Intel(R) AMT before versions 11.8.65, 11.11.65, 11.22.65, 12.0.35 may allow an unauthenticated user to potentially enable escalation of privilege via physical access.
low complexity
intel CWE-20
6.8
2019-05-17 CVE-2019-0089 Data Processing Errors vulnerability in Intel Server Platform Services
Improper data sanitization vulnerability in subsystem in Intel(R) SPS before versions SPS_E5_04.00.04.381.0, SPS_E3_04.01.04.054.0, SPS_SoC-A_04.00.04.181.0, and SPS_SoC-X_04.00.04.086.0 may allow a privileged user to potentially enable escalation of privilege via local access.
local
low complexity
intel CWE-19
6.7
2019-03-14 CVE-2018-18091 Use After Free vulnerability in Intel Graphics Driver
Use after free in Kernel Mode Driver in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x.5057 (aka 15.36.x.5057), 20.19.x.5063 (aka 15.40.x.5063) 21.20.x.5064 (aka 15.45.x.5064) and 24.20.100.6373 may allow an unprivileged user to potentially enable a denial of service via local access.
local
low complexity
intel CWE-416
6.5
2019-03-14 CVE-2018-18090 Out-of-bounds Read vulnerability in Intel Graphics Driver
Out of bounds read in igdkm64.sys in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x.5057 (aka 15.36.x.5057), 20.19.x.5063 (aka 15.40.x.5063) 21.20.x.5064 (aka 15.45.x.5064) and 24.20.100.6373 may allow an authenticated user to potentially enable denial of service via local access.
local
low complexity
intel CWE-125
5.5
2019-03-14 CVE-2018-18089 Out-of-bounds Read vulnerability in Intel Graphics Driver
Multiple out of bounds read in igdkm64.sys in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x.5057 (aka 15.36.x.5057), 20.19.x.5063 (aka 15.40.x.5063) 21.20.x.5064 (aka 15.45.x.5064) and 24.20.100.6373 may allow an authenticated user to potentially enable information disclosure via local access.
local
low complexity
intel CWE-125
5.5
2019-03-14 CVE-2018-12223 Incorrect Permission Assignment for Critical Resource vulnerability in Intel Graphics Driver
Insufficient access control in User Mode Driver in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x.5057 (aka 15.36.x.5057), 20.19.x.5063 (aka 15.40.x.5063) 21.20.x.5064 (aka 15.45.x.5064) and 24.20.100.6373 potentially enables an unprivileged user to escape from a virtual machine guest-to-host via local access.
local
low complexity
intel CWE-732
6.3