# cve.now: Intel

The newest entries naming Intel as an affected vendor (up to 200), of 280 in all, 1 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2024-8105](https://cve.now/CVE-2024-8105.md): Insecure Platform Key (PK) used in UEFI system firmware signature (CVSS 6.4)
- [CVE-2023-50197](https://cve.now/CVE-2023-50197.md): Intel Driver & Support Assistant Link Following Local Privilege Escalation Vulnerability (CVSS 7.8)
- [CVE-2023-42099](https://cve.now/CVE-2023-42099.md): Intel Driver & Support Assistant Link Following Local Privilege Escalation Vulnerability (CVSS 7.8)
- [CVE-2024-3411](https://cve.now/CVE-2024-3411.md): Insufficient Randomness When Validating an IPMI Authenticated Session (CVSS 9.1)
- [CVE-2023-4324](https://cve.now/CVE-2023-4324.md): Broadcom RAID Controller web interface is vulnerable due to insecure defaults of lacking HTTP Content-Security-Policy headers (no CVSS)
- [CVE-2023-4325](https://cve.now/CVE-2023-4325.md): Broadcom RAID Controller web interface is vulnerable due to usage of Libcurl with LSA has known vulnerabilities (no CVSS)
- [CVE-2023-4326](https://cve.now/CVE-2023-4326.md): Broadcom RAID Controller web interface is vulnerable has an insecure default TLS configuration that supports obsolete SHA1-based ciphersuites (no CVSS)
- [CVE-2023-4329](https://cve.now/CVE-2023-4329.md): Broadcom RAID Controller web interface is vulnerable due to insecure default of HTTP configuration that does not safeguard SESSIONID cookie with SameSite attribute (no CVSS)
- [CVE-2023-4331](https://cve.now/CVE-2023-4331.md): Broadcom RAID Controller web interface is vulnerable has an insecure default TLS configuration that support obsolete and vulnerable TLS protocols (no CVSS)
- [CVE-2023-4332](https://cve.now/CVE-2023-4332.md): Broadcom RAID Controller web interface is vulnerable due to Improper permissions on the log file (no CVSS)
- [CVE-2023-4334](https://cve.now/CVE-2023-4334.md): Broadcom RAID Controller Web server (nginx) is serving private files without any authentication (no CVSS)
- [CVE-2023-4335](https://cve.now/CVE-2023-4335.md): Broadcom RAID Controller Web server (nginx) is serving private server-side files without any authentication on Linux (no CVSS)
- [CVE-2023-4336](https://cve.now/CVE-2023-4336.md): Broadcom RAID Controller web interface is vulnerable due to insecure default of HTTP configuration that does not safeguard cookies with Secure attribute (no CVSS)
- [CVE-2023-4337](https://cve.now/CVE-2023-4337.md): Broadcom RAID Controller web interface is vulnerable to improper session handling of managed servers on Gateway installation (no CVSS)
- [CVE-2023-4338](https://cve.now/CVE-2023-4338.md): Broadcom RAID Controller web interface is vulnerable due to insecure default of HTTP configuration that does not provide X-Content-Type-Options Headers (no CVSS)
- [CVE-2023-4339](https://cve.now/CVE-2023-4339.md): Broadcom RAID Controller web interface is vulnerable to exposure of private keys used for CIM stored with insecure file permissions (no CVSS)
- [CVE-2023-4340](https://cve.now/CVE-2023-4340.md): Broadcom RAID Controller is vulnerable to Privilege escalation by taking advantage of the Session prints in the log file (no CVSS)
- [CVE-2023-4341](https://cve.now/CVE-2023-4341.md): Broadcom RAID Controller is vulnerable to Privilege escalation to root due to creation of insecure folders by Web GUI (no CVSS)
- [CVE-2023-4342](https://cve.now/CVE-2023-4342.md): Broadcom RAID Controller web interface is vulnerable due to insecure defaults of lacking HTTP strict-transport-security policy (no CVSS)
- [CVE-2023-4343](https://cve.now/CVE-2023-4343.md): Broadcom RAID Controller web interface is vulnerable due to exposure of sensitive password information in the URL as a URL search parameter (no CVSS)
- [CVE-2023-4344](https://cve.now/CVE-2023-4344.md): Broadcom RAID Controller web interface is vulnerable to insufficient randomness due to improper use of ssl.rnd to setup CIM connection (CVSS 9.8)
- [CVE-2023-4323](https://cve.now/CVE-2023-4323.md): Broadcom RAID Controller web interface is vulnerable to improper session management of active sessions on Gateway setup (no CVSS)
- [CVE-2023-4345](https://cve.now/CVE-2023-4345.md): Broadcom RAID Controller web interface is vulnerable client-side control bypass (no CVSS)
- [CVE-2022-29901](https://cve.now/CVE-2022-29901.md): Arbitrary Memory Disclosure through CPU Side-Channel Attacks (Retbleed) (CVSS 5.6)
- [CVE-2020-0583](https://cve.now/CVE-2020-0583.md): Improper access control in the subsystem for Intel(R) Smart Sound Technology may allow an authenticated user to potentially enable escalatio (no CVSS)
- [CVE-2020-0551](https://cve.now/CVE-2020-0551.md): Load value injection in some Intel(R) Processors utilizing speculative execution may allow an authenticated user to potentially enable infor (no CVSS)
- [CVE-2020-0550](https://cve.now/CVE-2020-0550.md): Improper data forwarding in some data cache for some Intel(R) Processors may allow an authenticated user to potentially enable information d (no CVSS)
- [CVE-2020-0530](https://cve.now/CVE-2020-0530.md): Improper buffer restrictions in firmware for Intel(R) NUC may allow an authenticated user to potentially enable escalation of privilege via (no CVSS)
- [CVE-2020-0574](https://cve.now/CVE-2020-0574.md): Improper configuration in block design for Intel(R) MAX(R) 10 FPGA all versions may allow an authenticated user to potentially enable escala (no CVSS)
- [CVE-2020-0567](https://cve.now/CVE-2020-0567.md): Improper input validation in Intel(R) Graphics Drivers before version 26.20.100.7212 may allow an authenticated user to enable denial of ser (no CVSS)
- [CVE-2020-0565](https://cve.now/CVE-2020-0565.md): Uncontrolled search path in Intel(R) Graphics Drivers before version 26.20.100.7158 may allow an authenticated user to potentially enable es (no CVSS)
- [CVE-2020-0556](https://cve.now/CVE-2020-0556.md): Improper access control in subsystem for BlueZ before version 5.54 may allow an unauthenticated user to potentially enable escalation of pri (no CVSS)
- [CVE-2020-0546](https://cve.now/CVE-2020-0546.md): Unquoted service path in Intel(R) Optane(TM) DC Persistent Memory Module Management Software before version 1.0.0.3461 may allow an authenti (no CVSS)
- [CVE-2020-0526](https://cve.now/CVE-2020-0526.md): Improper input validation in firmware for Intel(R) NUC may allow a privileged user to potentially enable escalation of privilege via local a (no CVSS)
- [CVE-2020-0520](https://cve.now/CVE-2020-0520.md): Path traversal in igdkmd64.sys for Intel(R) Graphics Drivers before versions 15.45.30.5103, 15.40.44.5107, 15.36.38.5117 and 15.33.49.5100 m (no CVSS)
- [CVE-2020-0519](https://cve.now/CVE-2020-0519.md): Improper access control for Intel(R) Graphics Drivers before versions 15.33.49.5100 and 15.36.38.5117 may allow an authenticated user to pot (no CVSS)
- [CVE-2020-0517](https://cve.now/CVE-2020-0517.md): Out-of-bounds write in Intel(R) Graphics Drivers before version 15.36.38.5117 may allow an authenticated user to potentially enable escalati (no CVSS)
- [CVE-2020-0516](https://cve.now/CVE-2020-0516.md): Improper access control in Intel(R) Graphics Drivers before version 26.20.100.7463 may allow an authenticated user to potentially enable den (no CVSS)
- [CVE-2020-0515](https://cve.now/CVE-2020-0515.md): Uncontrolled search path element in the installer for Intel(R) Graphics Drivers before versions 26.20.100.7584, 15.45.30.5103, 15.40.44.5107 (no CVSS)
- [CVE-2020-0514](https://cve.now/CVE-2020-0514.md): Improper default permissions in the installer for Intel(R) Graphics Drivers before versions 26.20.100.7463 and 15.45.30.5103 may allow an au (no CVSS)
- [CVE-2020-0511](https://cve.now/CVE-2020-0511.md): Uncaught exception in system driver for Intel(R) Graphics Drivers before version 15.40.44.5107 may allow an authenticated user to potentiall (no CVSS)
- [CVE-2020-0508](https://cve.now/CVE-2020-0508.md): Incorrect default permissions in the installer for Intel(R) Graphics Drivers before versions 15.33.49.5100, 15.36.38.5117, 15.40.44.5107, 15 (no CVSS)
- [CVE-2020-0503](https://cve.now/CVE-2020-0503.md): Improper access control in Intel(R) Graphics Drivers before version 26.20.100.7212 may allow an authenticated user to potentially enable inf (no CVSS)
- [CVE-2020-0505](https://cve.now/CVE-2020-0505.md): Improper conditions check in Intel(R) Graphics Drivers before versions 15.33.49.5100, 15.36.38.5117, 15.40.44.5107, 15.45.30.5103, and 26.20 (no CVSS)
- [CVE-2019-14625](https://cve.now/CVE-2019-14625.md): Improper access control in on-card storage for the Intel® FPGA Programmable Acceleration Card N3000, all versions, may allow a privileged us (no CVSS)
- [CVE-2019-14626](https://cve.now/CVE-2019-14626.md): Improper access control in PCIe function for the Intel® FPGA Programmable Acceleration Card N3000, all versions, may allow a privileged user (no CVSS)
- [CVE-2020-0501](https://cve.now/CVE-2020-0501.md): Buffer overflow in Intel(R) Graphics Drivers before version 26.20.100.6912 may allow an authenticated user to potentially enable a denial of (no CVSS)
- [CVE-2020-0502](https://cve.now/CVE-2020-0502.md): Improper access control in Intel(R) Graphics Drivers before version 26.20.100.6912 may allow an authenticated user to potentially enable esc (no CVSS)
- [CVE-2020-0504](https://cve.now/CVE-2020-0504.md): Buffer overflow in Intel(R) Graphics Drivers before versions 15.40.44.5107, 15.45.30.5103, and 26.20.100.7158 may allow an authenticated use (no CVSS)
- [CVE-2020-0506](https://cve.now/CVE-2020-0506.md): Improper initialization in Intel(R) Graphics Drivers before versions 15.40.44.5107, 15.45.29.5077, and 26.20.100.7000 may allow a privileged (no CVSS)
- [CVE-2020-0507](https://cve.now/CVE-2020-0507.md): Unquoted service path in Intel(R) Graphics Drivers before versions 15.33.49.5100, 15.36.38.5117, 15.40.44.5107, 15.45.30.5103, and 26.20.100 (no CVSS)
- [CVE-2020-0549](https://cve.now/CVE-2020-0549.md): Cleanup errors in some data cache evictions for some Intel(R) Processors may allow an authenticated user to potentially enable information d (no CVSS)
- [CVE-2020-0548](https://cve.now/CVE-2020-0548.md): Cleanup errors in some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access. (no CVSS)
- [CVE-2019-14629](https://cve.now/CVE-2019-14629.md): Improper permissions in Intel(R) DAAL before version 2020 Gold may allow an authenticated user to potentially enable information disclosure (no CVSS)
- [CVE-2019-14613](https://cve.now/CVE-2019-14613.md): Improper access control in driver for Intel(R) VTune(TM) Amplifier for Windows\* before update 8 may allow an authenticated user to potential (no CVSS)
- [CVE-2019-14615](https://cve.now/CVE-2019-14615.md): Insufficient control flow in certain data structures for some Intel(R) Processors with Intel(R) Processor Graphics may allow an unauthentica (no CVSS)
- [CVE-2019-14601](https://cve.now/CVE-2019-14601.md): Improper permissions in the installer for Intel(R) RWC 3 for Windows before version 7.010.009.000 may allow an authenticated user to potenti (no CVSS)
- [CVE-2019-14596](https://cve.now/CVE-2019-14596.md): Improper access control in the installer for Intel(R) Chipset Device Software INF Utility before version 10.1.18 may allow an authenticated (no CVSS)
- [CVE-2019-14600](https://cve.now/CVE-2019-14600.md): Uncontrolled search path element in the installer for Intel(R) SNMP Subagent Stand-Alone for Windows\* may allow an authenticated user to pot (no CVSS)
- [CVE-2019-14565](https://cve.now/CVE-2019-14565.md): Insufficient initialization in Intel(R) SGX SDK Windows versions 2.4.100.51291 and earlier, and Linux versions 2.6.100.51363 and earlier, ma (no CVSS)
- [CVE-2019-14566](https://cve.now/CVE-2019-14566.md): Insufficient input validation in Intel(R) SGX SDK multiple Linux and Windows versions may allow an authenticated user to enable information (no CVSS)
- [CVE-2019-14570](https://cve.now/CVE-2019-14570.md): Memory corruption in system firmware for Intel(R) NUC may allow a privileged user to potentially enable escalation of privilege, denial of s (no CVSS)
- [CVE-2019-14569](https://cve.now/CVE-2019-14569.md): Pointer corruption in system firmware for Intel(R) NUC may allow a privileged user to potentially enable escalation of privilege, denial of (no CVSS)
- [CVE-2019-11167](https://cve.now/CVE-2019-11167.md): Improper file permission in software installer for Intel(R) Smart Connect Technology for Intel(R) NUC may allow an authenticated user to pot (no CVSS)
- [CVE-2019-11120](https://cve.now/CVE-2019-11120.md): Insufficient path checking in the installer for Intel(R) Active System Console before version 8.0 Build 24 may allow an authenticated user t (no CVSS)
- [CVE-2018-18095](https://cve.now/CVE-2018-18095.md): Improper authentication in firmware for Intel(R) SSD DC S4500 Series and Intel(R) SSD DC S4600 Series before SCV10150 may allow an unprivile (no CVSS)
- [CVE-2019-11133](https://cve.now/CVE-2019-11133.md): Improper access control in the Intel(R) Processor Diagnostic Tool before version 4.1.2.24 may allow an authenticated user to potentially ena (no CVSS)
- [CVE-2018-12130](https://cve.now/CVE-2018-12130.md): Microarchitectural Fill Buffer Data Sampling (MFBDS): Fill buffers on some microprocessors utilizing speculative execution may allow an auth (CVSS 5.9)
- [CVE-2018-12127](https://cve.now/CVE-2018-12127.md): Microarchitectural Load Port Data Sampling (MLPDS): Load ports on some microprocessors utilizing speculative execution may allow an authenti (CVSS 5.6)
- [CVE-2018-12126](https://cve.now/CVE-2018-12126.md): Microarchitectural Store Buffer Data Sampling (MSBDS): Store buffers on some microprocessors utilizing speculative execution may allow an au (CVSS 5.6)
- [CVE-2019-11091](https://cve.now/CVE-2019-11091.md): Microarchitectural Data Sampling Uncacheable Memory (MDSUM): Uncacheable memory on some microprocessors utilizing speculative execution may (CVSS 5.6)
- [CVE-2019-0129](https://cve.now/CVE-2019-0129.md): Improper permissions for Intel(R) USB 3.0 Creator Utility all versions may allow an authenticated user to potentially enable escalation of p (no CVSS)
- [CVE-2019-0122](https://cve.now/CVE-2019-0122.md): Double free in Intel(R) SGX SDK for Linux before version 2.2 and Intel(R) SGX SDK for Windows before version 2.1 may allow an authenticated (no CVSS)
- [CVE-2019-0121](https://cve.now/CVE-2019-0121.md): Improper permissions in Intel(R) Matrix Storage Manager 8.9.0.1023 and before may allow an authenticated user to potentially enable escalati (no CVSS)
- [CVE-2018-18091](https://cve.now/CVE-2018-18091.md): Use after free in Kernel Mode Driver in Intel(R) Graphics Driver for Windows\* before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x.5057 (no CVSS)
- [CVE-2018-18090](https://cve.now/CVE-2018-18090.md): Out of bounds read in igdkm64.sys in Intel(R) Graphics Driver for Windows\* before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x.5057 (ak (no CVSS)
- [CVE-2018-18089](https://cve.now/CVE-2018-18089.md): Multiple out of bounds read in igdkm64.sys in Intel(R) Graphics Driver for Windows\* before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x (no CVSS)
- [CVE-2018-12224](https://cve.now/CVE-2018-12224.md): Buffer leakage in igdkm64.sys in Intel(R) Graphics Driver for Windows\* before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x.5057 (aka 15 (no CVSS)
- [CVE-2018-12223](https://cve.now/CVE-2018-12223.md): Insufficient access control in User Mode Driver in Intel(R) Graphics Driver for Windows\* before versions 10.18.x.5059 (aka 15.33.x.5059), 10 (no CVSS)
- [CVE-2018-12222](https://cve.now/CVE-2018-12222.md): Insufficient input validation in Kernel Mode Driver in Intel(R) Graphics Driver for Windows\* before versions 10.18.x.5059 (aka 15.33.x.5059) (no CVSS)
- [CVE-2018-12221](https://cve.now/CVE-2018-12221.md): Insufficient input validation in Kernel Mode Driver in Intel(R) Graphics Driver for Windows\* before versions 10.18.x.5059 (aka 15.33.x.5059) (no CVSS)
- [CVE-2018-12220](https://cve.now/CVE-2018-12220.md): Logic bug in Kernel Mode Driver in Intel(R) Graphics Driver for Windows\* before versions before versions 10.18.x.5059 (aka 15.33.x.5059), 10 (no CVSS)
- [CVE-2018-12219](https://cve.now/CVE-2018-12219.md): Insufficient input validation in Kernel Mode Driver in Intel(R) Graphics Driver for Windows\* before versions 10.18.x.5059 (aka 15.33.x.5059) (no CVSS)
- [CVE-2018-12218](https://cve.now/CVE-2018-12218.md): Unhandled exception in User Mode Driver in Intel(R) Graphics Driver for Windows\* before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x.50 (no CVSS)
- [CVE-2018-12217](https://cve.now/CVE-2018-12217.md): Insufficient access control in Kernel Mode Driver in Intel(R) Graphics Driver for Windows\* before versions 10.18.x.5059 (aka 15.33.x.5059), (no CVSS)
- [CVE-2018-12216](https://cve.now/CVE-2018-12216.md): Insufficient input validation in Kernel Mode Driver in Intel(R) Graphics Driver for Windows\* before versions 10.18.x.5059 (aka 15.33.x.5059) (no CVSS)
- [CVE-2018-12215](https://cve.now/CVE-2018-12215.md): Insufficient input validation in Kernel Mode Driver in Intel(R) Graphics Driver for Windows\* before versions 10.18.x.5059 (aka 15.33.x.5059) (no CVSS)
- [CVE-2018-12214](https://cve.now/CVE-2018-12214.md): Potential memory corruption in Kernel Mode Driver in Intel(R) Graphics Driver for Windows\* before versions 10.18.x.5059 (aka 15.33.x.5059), (no CVSS)
- [CVE-2018-12213](https://cve.now/CVE-2018-12213.md): Potential memory corruption in Kernel Mode Driver in Intel(R) Graphics Driver for Windows\* before versions 10.18.x.5059 (aka 15.33.x.5059), (no CVSS)
- [CVE-2018-12212](https://cve.now/CVE-2018-12212.md): Buffer overflow in User Mode Driver in Intel(R) Graphics Driver for Windows\* before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x.5057 ( (no CVSS)
- [CVE-2018-12211](https://cve.now/CVE-2018-12211.md): Insufficient input validation in User Mode Driver in Intel(R) Graphics Driver for Windows\* before versions 10.18.x.5059 (aka 15.33.x.5059), (no CVSS)
- [CVE-2018-12210](https://cve.now/CVE-2018-12210.md): Multiple pointer dereferences in User Mode Driver in Intel(R) Graphics Driver for Windows\* before versions 10.18.x.5059 (aka 15.33.x.5059), (no CVSS)
- [CVE-2018-12209](https://cve.now/CVE-2018-12209.md): Insufficient access control in User Mode Driver in Intel(R) Graphics Driver for Windows before versions 10.18.x.5059 (aka 15.33.x.5059)… (no CVSS)
- [CVE-2018-12208](https://cve.now/CVE-2018-12208.md): Buffer overflow in HECI subsystem in Intel(R) CSME before versions 11.8.60, 11.11.60, 11.22.60 or 12.0.20 and Intel(R) TXE version before 3. (no CVSS)
- [CVE-2018-12205](https://cve.now/CVE-2018-12205.md): Improper certificate validation in Platform Sample/ Silicon Reference firmware for 8th Generation Intel(R) Core(tm) Processor, 7th Generatio (no CVSS)
- [CVE-2018-12204](https://cve.now/CVE-2018-12204.md): Improper memory initialization in Platform Sample/Silicon Reference firmware Intel(R) Server Board, Intel(R) Server System and Intel(R) Comp (no CVSS)
- [CVE-2018-12203](https://cve.now/CVE-2018-12203.md): Denial of service vulnerability in Platform Sample/ Silicon Reference firmware for 8th Generation Intel Core Processor, 7th Generation Intel (no CVSS)
- [CVE-2018-12202](https://cve.now/CVE-2018-12202.md): Privilege escalation vulnerability in Platform Sample/ Silicon Reference firmware for 8th Generation Intel(R) Core Processor, 7th Generation (no CVSS)
- [CVE-2018-12201](https://cve.now/CVE-2018-12201.md): Buffer overflow vulnerability in Platform Sample / Silicon Reference firmware for 8th Generation Intel(R) Core Processor, 7th Generation Int (no CVSS)
- [CVE-2018-12200](https://cve.now/CVE-2018-12200.md): Insufficient access control in Intel(R) Capability Licensing Service before version 1.50.638.1 may allow an unprivileged user to potentially (no CVSS)
- [CVE-2018-12199](https://cve.now/CVE-2018-12199.md): Buffer overflow in an OS component in Intel CSME before versions 11.8.60, 11.11.60, 11.22.60 or 12.0.20 and Intel TXE version before 3.1.60 (no CVSS)
- [CVE-2018-12198](https://cve.now/CVE-2018-12198.md): Insufficient input validation in Intel(R) Server Platform Services HECI subsystem before version SPS\_E5\_04.00.04.393.0 may allow privileged (no CVSS)
- [CVE-2018-12196](https://cve.now/CVE-2018-12196.md): Insufficient input validation in Intel(R) AMT in Intel(R) CSME before version 11.8.60, 11.11.60, 11.22.60 or 12.0.20 may allow a privileged (no CVSS)
- [CVE-2018-12192](https://cve.now/CVE-2018-12192.md): Logic bug in Kernel subsystem in Intel CSME before version 11.8.60, 11.11.60, 11.22.60 or 12.0.20, or Intel(R) Server Platform Services befo (no CVSS)
- [CVE-2018-12191](https://cve.now/CVE-2018-12191.md): Bounds check in Kernel subsystem in Intel CSME before version 11.8.60, 11.11.60, 11.22.60 or 12.0.20, or Intel(R) Server Platform Services b (no CVSS)
- [CVE-2018-12190](https://cve.now/CVE-2018-12190.md): Insufficient input validation in Intel(r) CSME subsystem before versions 11.8.60, 11.11.60, 11.22.60 or 12.0.20 or Intel(r) TXE before 3.1.6 (no CVSS)
- [CVE-2018-12189](https://cve.now/CVE-2018-12189.md): Unhandled exception in Content Protection subsystem in Intel CSME before versions 11.8.60, 11.11.60, 11.22.60 or 12.0.20 or Intel TXE before (no CVSS)
- [CVE-2018-12188](https://cve.now/CVE-2018-12188.md): Insufficient input validation in Intel CSME before versions 11.8.60, 11.11.60, 11.22.60 or 12.0.20 or Intel TXE before version 3.1.60 or 4.0 (no CVSS)
- [CVE-2018-12187](https://cve.now/CVE-2018-12187.md): Insufficient input validation in Intel(R) Active Management Technology (Intel(R) AMT) before version 11.8.60, 11.11.60, 11.22.60 or 12.0.20 (no CVSS)
- [CVE-2018-12185](https://cve.now/CVE-2018-12185.md): Insufficient input validation in Intel(R) AMT in Intel(R) CSME before version 11.8.60, 11.11.60, 11.22.60 or 12.0.20 may allow an unauthenti (no CVSS)
- [CVE-2019-0088](https://cve.now/CVE-2019-0088.md): Insufficient path checking in Intel(R) System Support Utility for Windows before 2.5.0.15 may allow an authenticated user to potentially ena (no CVSS)
- [CVE-2018-3703](https://cve.now/CVE-2018-3703.md): Improper directory permissions in the installer for the Intel(R) SSD Data Center Tool for Windows before v3.0.17 may allow authenticated use (no CVSS)
- [CVE-2018-18098](https://cve.now/CVE-2018-18098.md): Improper file verification in install routine for Intel(R) SGX SDK and Platform Software for Windows before 2.2.100 may allow an escalation (no CVSS)
- [CVE-2018-12177](https://cve.now/CVE-2018-12177.md): Improper directory permissions in the ZeroConfig service in Intel(R) PROSet/Wireless WiFi Software before version 20.90.0.7 may allow an aut (no CVSS)
- [CVE-2018-12167](https://cve.now/CVE-2018-12167.md): Firmware update routine in bootloader for Intel(R) Optane(TM) SSD DC P4800X before version E2010435 may allow a privileged user to potential (no CVSS)
- [CVE-2018-12166](https://cve.now/CVE-2018-12166.md): Insufficient write protection in firmware for Intel(R) Optane(TM) SSD DC P4800X before version E2010435 may allow a privileged user to poten (no CVSS)
- [CVE-2017-3718](https://cve.now/CVE-2017-3718.md): Improper setting of device configuration in system firmware for Intel(R) NUC kits may allow a privileged user to potentially enable escalati (no CVSS)
- [CVE-2018-3705](https://cve.now/CVE-2018-3705.md): Improper directory permissions in the installer for the Intel(R) System Defense Utility (all versions) may allow authenticated users to pote (no CVSS)
- [CVE-2018-3704](https://cve.now/CVE-2018-3704.md): Improper directory permissions in the installer for the Intel Parallel Studio before 2019 Gold may allow authenticated users to potentially (no CVSS)
- [CVE-2018-18097](https://cve.now/CVE-2018-18097.md): Improper directory permissions in Intel Solid State Drive Toolbox before 3.5.7 may allow an authenticated user to potentially enable escalat (no CVSS)
- [CVE-2018-18096](https://cve.now/CVE-2018-18096.md): Improper memory handling in Intel QuickAssist Technology for Linux (all versions) may allow an authenticated user to potentially enable a de (no CVSS)
- [CVE-2018-18093](https://cve.now/CVE-2018-18093.md): Improper file permissions in the installer for Intel VTune Amplifier 2018 Update 3 and before may allow unprivileged user to potentially gai (no CVSS)
- [CVE-2018-12206](https://cve.now/CVE-2018-12206.md): Improper configuration of hardware access in Intel QuickAssist Technology for Linux (all versions) may allow an authenticated user to potent (no CVSS)
- [CVE-2018-12155](https://cve.now/CVE-2018-12155.md): Data leakage in cryptographic libraries for Intel IPP before 2019 update1 release may allow an authenticated user to potentially enable info (no CVSS)
- [CVE-2018-3699](https://cve.now/CVE-2018-3699.md): Cross-site scripting in the Intel RAID Web Console v3 for Windows may allow an unauthenticated user to elevate privilege via remote access. (no CVSS)
- [CVE-2018-3698](https://cve.now/CVE-2018-3698.md): Improper file permissions in the installer for the Intel Ready Mode Technology may allow an unprivileged user to potentially gain privileged (no CVSS)
- [CVE-2018-3697](https://cve.now/CVE-2018-3697.md): Improper directory permissions in the installer for the Intel Media Server Studio may allow unprivileged users to potentially enable an esca (no CVSS)
- [CVE-2018-3696](https://cve.now/CVE-2018-3696.md): Authentication bypass in the Intel RAID Web Console 3 for Windows before 4.186 may allow an unprivileged user to potentially gain administra (no CVSS)
- [CVE-2018-3635](https://cve.now/CVE-2018-3635.md): Insufficient input validation in installer in Intel Rapid Store Technology (RST) before version 16.7 may allow an unprivileged user to poten (no CVSS)
- [CVE-2018-3621](https://cve.now/CVE-2018-3621.md): Insufficient input validation in the Intel Driver & Support Assistant before 3.6.0.4 may allow an unauthenticated user to potentially enable (no CVSS)
- [CVE-2018-12174](https://cve.now/CVE-2018-12174.md): Heap overflow in Intel Trace Analyzer 2018 in Intel Parallel Studio XE 2018 Update 3 may allow an authenticated user to potentially escalate (no CVSS)
- [CVE-2018-12154](https://cve.now/CVE-2018-12154.md): Denial of Service in Unified Shader Compiler in Intel Graphics Drivers before 10.18.x.5056 (aka 15.33.x.5056), 10.18.x.5057 (aka 15.36.x.505 (no CVSS)
- [CVE-2018-12193](https://cve.now/CVE-2018-12193.md): Insufficient access control in driver stack for Intel QuickAssist Technology for Linux before version 4.2 may allow an unprivileged user to (no CVSS)
- [CVE-2018-12173](https://cve.now/CVE-2018-12173.md): Insufficient access protection in firmware in Intel Server Board, Intel Server System and Intel Compute Module before firmware version 00.01 (no CVSS)
- [CVE-2018-12172](https://cve.now/CVE-2018-12172.md): Improper password hashing in firmware in Intel Server Board (S7200AP,S7200APR) and Intel Compute Module (HNS7200AP, HNS7200AP) may allow a p (no CVSS)
- [CVE-2018-12161](https://cve.now/CVE-2018-12161.md): Insufficient session validation in the webserver component of the Intel Rapid Web Server 3 may allow an unauthenticated user to potentially (no CVSS)
- [CVE-2018-12158](https://cve.now/CVE-2018-12158.md): Insufficient input validation in BIOS update utility in Intel NUC FW kits downloaded before May 24, 2018 may allow a privileged user to pote (no CVSS)
- [CVE-2018-12153](https://cve.now/CVE-2018-12153.md): Denial of Service in Unified Shader Compiler in Intel Graphics Drivers before 10.18.x.5056 (aka 15.33.x.5056), 10.18.x.5057 (aka 15.36.x.505 (no CVSS)
- [CVE-2018-12152](https://cve.now/CVE-2018-12152.md): Pointer corruption in Unified Shader Compiler in Intel Graphics Drivers before 10.18.x.5056 (aka 15.33.x.5056), 10.18.x.5057 (aka 15.36.x.50 (no CVSS)
- [CVE-2018-12131](https://cve.now/CVE-2018-12131.md): Permissions in the driver pack installers for Intel NVMe before version 4.0.0.1007 and Intel RSTe before version 4.7.0.2083 may allow an aut (no CVSS)
- [CVE-2018-3686](https://cve.now/CVE-2018-3686.md): Code injection vulnerability in INTEL-SA-00086 Detection Tool before version 1.2.7.0 may allow a privileged user to potentially execute arbi (no CVSS)
- [CVE-2018-3679](https://cve.now/CVE-2018-3679.md): Escalation of privilege in Reference UI in Intel Data Center Manager SDK 5.0 and before may allow an unauthorized remote unauthenticated use (no CVSS)
- [CVE-2018-3669](https://cve.now/CVE-2018-3669.md): A STOP error (BSoD) in the ibtfltcoex.sys driver for Intel Centrino Wireless N and Intel Centrino Advanced N adapters may allow an unauthent (no CVSS)
- [CVE-2018-3659](https://cve.now/CVE-2018-3659.md): A vulnerability in Intel PTT module in Intel CSME firmware before version 12.0.5 and Intel TXE firmware before version 4.0 may allow an unau (no CVSS)
- [CVE-2018-3658](https://cve.now/CVE-2018-3658.md): Multiple memory leaks in Intel AMT in Intel CSME firmware versions before 12.0.5 may allow an unauthenticated user with Intel AMT provisione (no CVSS)
- [CVE-2018-3657](https://cve.now/CVE-2018-3657.md): Multiple buffer overflows in Intel AMT in Intel CSME firmware versions before version 12.0.5 may allow a privileged user to potentially exec (no CVSS)
- [CVE-2018-3655](https://cve.now/CVE-2018-3655.md): A vulnerability in a subsystem in Intel CSME before version 11.21.55, Intel Server Platform Services before version 4.0 and Intel Trusted Ex (no CVSS)
- [CVE-2018-3643](https://cve.now/CVE-2018-3643.md): A vulnerability in Power Management Controller firmware in systems using specific Intel(R) Converged Security and Management Engine (CSME) b (no CVSS)
- [CVE-2018-3616](https://cve.now/CVE-2018-3616.md): Bleichenbacher-style side channel vulnerability in TLS implementation in Intel Active Management Technology before 12.0.5 may allow an unaut (no CVSS)
- [CVE-2018-12176](https://cve.now/CVE-2018-12176.md): Improper input validation in firmware for Intel NUC Kits may allow a privileged user to potentially execute arbitrary code resulting in info (no CVSS)
- [CVE-2018-12175](https://cve.now/CVE-2018-12175.md): Default install directory permissions in Intel Distribution for Python (IDP) version 2018 may allow an unprivileged user to escalate privile (no CVSS)
- [CVE-2018-12171](https://cve.now/CVE-2018-12171.md): Privilege escalation in Intel Baseboard Management Controller (BMC) firmware before version 1.43.91f76955 may allow an unprivileged user to (no CVSS)
- [CVE-2018-12168](https://cve.now/CVE-2018-12168.md): Privilege escalation in file permissions in Intel Computing Improvement Program before version 2.2.0.03942 may allow an authenticated user t (no CVSS)
- [CVE-2018-12163](https://cve.now/CVE-2018-12163.md): A DLL injection vulnerability in the Intel IoT Developers Kit 4.0 installer may allow an authenticated user to potentially escalate privileg (no CVSS)
- [CVE-2018-12162](https://cve.now/CVE-2018-12162.md): Directory permissions in the Intel OpenVINO Toolkit for Windows before version 2018.1.265 may allow an authenticated user to potentially exe (no CVSS)
- [CVE-2018-12160](https://cve.now/CVE-2018-12160.md): DLL injection vulnerability in software installer for Intel Data Center Migration Center Software v3.1 and before may allow an authenticated (no CVSS)
- [CVE-2018-12151](https://cve.now/CVE-2018-12151.md): Buffer overflow in installer for Intel Extreme Tuning Utility before 6.4.1.21 may allow an authenticated user to potentially cause a buffer (no CVSS)
- [CVE-2018-12150](https://cve.now/CVE-2018-12150.md): Escalation of privilege in Installer for Intel Extreme Tuning Utility before 6.4.1.21 may allow an authenticated user to potentially execute (no CVSS)
- [CVE-2018-12149](https://cve.now/CVE-2018-12149.md): Buffer overflow in input handling in Intel Extreme Tuning Utility before 6.4.1.21 may allow an authenticated user to potentially deny servic (no CVSS)
- [CVE-2018-12148](https://cve.now/CVE-2018-12148.md): Privilege escalation in file permissions in Intel Driver and Support Assistant before 3.5.0.1 may allow an authenticated user to potentially (no CVSS)
- [CVE-2018-10932](https://cve.now/CVE-2018-10932.md): lldptool version 1.0.1 and older can print a raw, unsanitized attacker controlled buffer when mngAddr information is displayed. (CVSS 4.3)
- [CVE-2018-3646](https://cve.now/CVE-2018-3646.md): Systems with microprocessors utilizing speculative execution and address translations may allow unauthorized disclosure of information resid (CVSS 5.6)
- [CVE-2018-3620](https://cve.now/CVE-2018-3620.md): Systems with microprocessors utilizing speculative execution and address translations may allow unauthorized disclosure of information resid (CVSS 5.6)
- [CVE-2018-3615](https://cve.now/CVE-2018-3615.md): Systems with microprocessors utilizing speculative execution and Intel software guard extensions (Intel SGX) may allow unauthorized disclosu (CVSS 7.3)
- [CVE-2018-3672](https://cve.now/CVE-2018-3672.md): Driver module in Intel Smart Sound Technology before version 9.21.00.3541 potentially allows a local attacker to execute arbitrary code as a (no CVSS)
- [CVE-2018-3671](https://cve.now/CVE-2018-3671.md): Escalation of privilege in Intel Saffron admin application before 11.4 allows an authenticated user to access unauthorized information. (no CVSS)
- [CVE-2018-3670](https://cve.now/CVE-2018-3670.md): Driver module in Intel Smart Sound Technology before version 9.21.00.3541 potentially allows a local attacker to execute arbitrary code as a (no CVSS)
- [CVE-2018-3666](https://cve.now/CVE-2018-3666.md): Driver module in Intel Smart Sound Technology before version 9.21.00.3541 potentially allows a local attacker to execute arbitrary code as a (no CVSS)
- [CVE-2018-3663](https://cve.now/CVE-2018-3663.md): Escalation of privilege in Intel Saffron MemoryBase before 11.4 allows an authenticated user access to privileged information. (no CVSS)
- [CVE-2018-3662](https://cve.now/CVE-2018-3662.md): Escalation of privilege in Intel Saffron MemoryBase before version 11.4 potentially allows an authorized user of the Saffron application to (no CVSS)
- [CVE-2018-3650](https://cve.now/CVE-2018-3650.md): Insufficient Input Validation in Bleach module in INTEL Distribution for Python versions prior to IDP 2018 Update 2 allows unprivileged user (no CVSS)
- [CVE-2017-5692](https://cve.now/CVE-2017-5692.md): Out-of-bounds read condition in older versions of some Intel Graphics Driver for Windows code branches allows local users to perform a denia (no CVSS)
- [CVE-2017-5693](https://cve.now/CVE-2017-5693.md): Firmware in the Intel Puma 5, 6, and 7 Series might experience resource depletion or timeout, which allows a network attacker to create a de (no CVSS)
- [CVE-2018-3693](https://cve.now/CVE-2018-3693.md): Systems with microprocessors utilizing speculative execution and branch prediction may allow unauthorized disclosure of information to an at (no CVSS)
- [CVE-2018-3688](https://cve.now/CVE-2018-3688.md): Unquoted service paths in Intel Quartus Prime Programmer and Tools in versions 15.1 - 18.0 allow a local attacker to potentially execute arb (no CVSS)
- [CVE-2018-3687](https://cve.now/CVE-2018-3687.md): Unquoted service paths in Intel Quartus II Programmer and Tools in versions 11.0 - 15.0 allow a local attacker to potentially execute arbitr (no CVSS)
- [CVE-2018-3684](https://cve.now/CVE-2018-3684.md): Unquoted service paths in Intel Quartus II in versions 11.0 - 15.0 allow a local attacker to potentially execute arbitrary code. (no CVSS)
- [CVE-2018-3683](https://cve.now/CVE-2018-3683.md): Unquoted service paths in Intel Quartus Prime in versions 15.1 - 18.0 allow a local attacker to potentially execute arbitrary code. (no CVSS)
- [CVE-2018-3682](https://cve.now/CVE-2018-3682.md): BMC Firmware in Intel server boards, compute modules, and systems potentially allow an attacker with administrative privileges to make unaut (no CVSS)
- [CVE-2018-3668](https://cve.now/CVE-2018-3668.md): Unquoted service paths in Intel Processor Diagnostic Tool (IPDT) before version 4.1.0.27 allows a local attacker to potentially execute arbi (no CVSS)
- [CVE-2018-3667](https://cve.now/CVE-2018-3667.md): Installation tool IPDT (Intel Processor Diagnostic Tool) 4.1.0.24 sets permissions of installed files incorrectly, allowing for execution of (no CVSS)
- [CVE-2018-3652](https://cve.now/CVE-2018-3652.md): Existing UEFI setting restrictions for DCI (Direct Connect Interface) in 5th and 6th generation Intel Xeon Processor E3 Family, Intel Xeon S (no CVSS)
- [CVE-2018-3632](https://cve.now/CVE-2018-3632.md): Memory corruption in Intel Active Management Technology in Intel Converged Security Manageability Engine Firmware 6.x / 7.x / 8.x / 9.x / 10 (no CVSS)
- [CVE-2018-3629](https://cve.now/CVE-2018-3629.md): Buffer overflow in event handler in Intel Active Management Technology in Intel Converged Security Manageability Engine Firmware 3.x, 4.x, 5 (no CVSS)
- [CVE-2018-3628](https://cve.now/CVE-2018-3628.md): Buffer overflow in HTTP handler in Intel Active Management Technology in Intel Converged Security Manageability Engine Firmware 3.x, 4.x, 5. (no CVSS)
- [CVE-2018-3627](https://cve.now/CVE-2018-3627.md): Logic bug in Intel Converged Security Management Engine 11.x may allow an attacker to execute arbitrary code via local privileged access. (no CVSS)
- [CVE-2018-3619](https://cve.now/CVE-2018-3619.md): Information disclosure vulnerability in storage media in systems with Intel Optane memory module with Whole Disk Encryption may allow an att (no CVSS)
- [CVE-2017-5704](https://cve.now/CVE-2017-5704.md): Platform sample code firmware included with 4th Gen Intel Core Processor, 5th Gen Intel Core Processor, 6th Gen Intel Core Processor, and 7t (no CVSS)
- [CVE-2018-3665](https://cve.now/CVE-2018-3665.md): System software utilizing Lazy FP state restore technique on systems using Intel Core-based microprocessors may potentially allow a local pr (no CVSS)
- [CVE-2018-3691](https://cve.now/CVE-2018-3691.md): Some implementations in Intel Integrated Performance Primitives Cryptography Library before version 2018 U3.1 do not properly ensure constan (no CVSS)
- [CVE-2018-3640](https://cve.now/CVE-2018-3640.md): Systems with microprocessors utilizing speculative execution and that perform speculative reads of system registers may allow unauthorized d (no CVSS)
- [CVE-2018-3639](https://cve.now/CVE-2018-3639.md): Systems with microprocessors utilizing speculative execution and speculative execution of memory reads before the addresses of all prior mem (CVSS 5.5)
- [CVE-2018-3661](https://cve.now/CVE-2018-3661.md): Buffer overflow in Intel system Configuration utilities selview.exe and syscfg.exe before version 14 build 11 allows a local user to crash t (no CVSS)
- [CVE-2018-3634](https://cve.now/CVE-2018-3634.md): Parameter corruption in NDIS filter driver in Intel Online Connect Access 1.9.22.0 allows an attacker to cause a denial of service via local (no CVSS)
- [CVE-2018-3611](https://cve.now/CVE-2018-3611.md): Bounds check vulnerability in User Mode Driver in Intel Graphics Driver 15.40.x.4 and 21.20.x.x allows unprivileged user to cause a denial o (no CVSS)
- [CVE-2018-3649](https://cve.now/CVE-2018-3649.md): DLL injection vulnerability in the installation executables (Autorun.exe and Setup.exe) for Intel's wireless drivers and related software in (no CVSS)
- [CVE-2018-3624](https://cve.now/CVE-2018-3624.md): Buffer overflow in ETWS processing module Intel XMM71xx, XMM72xx, XMM73xx, XMM74xx and Sofia 3G/R allows remote attacker to potentially exec (no CVSS)
- [CVE-2018-3645](https://cve.now/CVE-2018-3645.md): Escalation of privilege in all versions of the Intel Remote Keyboard allows a local attacker to inject keystrokes into another remote keyboa (no CVSS)
- [CVE-2018-3641](https://cve.now/CVE-2018-3641.md): Escalation of privilege in all versions of the Intel Remote Keyboard allows a network attacker to inject keystrokes as a local user. (no CVSS)
- [CVE-2018-3638](https://cve.now/CVE-2018-3638.md): Escalation of privilege in all versions of the Intel Remote Keyboard allows an authorized local attacker to execute arbitrary code as a priv (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/intel
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.