Vulnerabilities > Intel > Medium

DATE CVE VULNERABILITY TITLE RISK
2018-08-01 CVE-2018-3671 Unspecified vulnerability in Intel Saffron Memorybase
Escalation of privilege in Intel Saffron admin application before 11.4 allows an authenticated user to access unauthorized information.
low complexity
intel
5.7
2018-08-01 CVE-2018-3663 Unspecified vulnerability in Intel Saffron Memorybase
Escalation of privilege in Intel Saffron MemoryBase before 11.4 allows an authenticated user access to privileged information.
low complexity
intel
5.7
2018-08-01 CVE-2017-5692 Out-of-bounds Read vulnerability in Intel Graphics Driver
Out-of-bounds read condition in older versions of some Intel Graphics Driver for Windows code branches allows local users to perform a denial of service attack.
local
low complexity
intel CWE-125
5.5
2018-07-10 CVE-2018-3693 Systems with microprocessors utilizing speculative execution and branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a speculative buffer overflow and side-channel analysis. 5.6
2018-07-10 CVE-2018-3632 Out-of-bounds Write vulnerability in Intel Active Management Technology Firmware
Memory corruption in Intel Active Management Technology in Intel Converged Security Manageability Engine Firmware 6.x / 7.x / 8.x / 9.x / 10.x / 11.0 / 11.5 / 11.6 / 11.7 / 11.10 / 11.20 could be triggered by an attacker with local administrator permission on the system.
local
low complexity
intel CWE-787
6.7
2018-07-10 CVE-2018-3629 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Intel Active Management Technology Firmware
Buffer overflow in event handler in Intel Active Management Technology in Intel Converged Security Manageability Engine Firmware 3.x, 4.x, 5.x, 6.x, 7.x, 8.x, 9.x, 10.x, and 11.x may allow an attacker to cause a denial of service via the same subnet.
low complexity
intel CWE-119
6.5
2018-07-10 CVE-2018-3619 Information Exposure vulnerability in Intel products
Information disclosure vulnerability in storage media in systems with Intel Optane memory module with Whole Disk Encryption may allow an attacker to recover data via physical access.
low complexity
intel CWE-200
4.6
2018-07-10 CVE-2017-5704 Insufficiently Protected Credentials vulnerability in Intel Core I3
Platform sample code firmware included with 4th Gen Intel Core Processor, 5th Gen Intel Core Processor, 6th Gen Intel Core Processor, and 7th Gen Intel Core Processor potentially exposes password information in memory to a local attacker with administrative privileges.
local
low complexity
intel CWE-522
6.7
2018-06-21 CVE-2018-3665 Information Exposure vulnerability in multiple products
System software utilizing Lazy FP state restore technique on systems using Intel Core-based microprocessors may potentially allow a local process to infer data from another process through a speculative execution side channel.
5.6
2018-06-05 CVE-2018-3691 Unspecified vulnerability in Intel Integrated Performance Primitives Cryptography
Some implementations in Intel Integrated Performance Primitives Cryptography Library before version 2018 U3.1 do not properly ensure constant execution time.
local
high complexity
intel
4.7