CVEdetails.com the ultimate security vulnerability data source
(e.g.: CVE-2009-1234 or 2010-1234 or 20101234)
Log In   Register
  Take a third party risk management course for FREE
Vulnerability Feeds & WidgetsNew   www.itsecdb.com  

Intel : Security Vulnerabilities

CVSS Scores Greater Than: 0   1   2   3   4   5   6   7   8   9  
Press ESC to close
# CVE ID CWE ID # of Exploits Vulnerability Type(s) Publish Date Update Date Score Gained Access Level Access Complexity Authentication Conf. Integ. Avail.
1 CVE-2022-41614 522 2023-02-16 2023-03-07
0.0
 None ??? ??? ??? ??? ??? ???
Insufficiently protected credentials in the Intel(R) ON Event Series Android application before version 2.0 may allow an authenticated user to potentially enable information disclosure via local access.
2 CVE-2022-41342 119 Overflow 2023-02-06 2023-03-17
0.0
 None ??? ??? ??? ??? ??? ???
Improper buffer restrictions in the Intel(R) C++ Compiler Classic before version 2021.7.1 for some Intel(R) oneAPI Toolkits before version 2022.3.1 may allow a privileged user to potentially enable escalation of privilege via local access.
3 CVE-2022-41314 427 2023-02-16 2023-03-06
0.0
 None ??? ??? ??? ??? ??? ???
Uncontrolled search path in some Intel(R) Network Adapter installer software may allow an authenticated user to potentially enable escalation of privilege via local access.
4 CVE-2022-40196 2023-02-06 2023-03-17
0.0
 None ??? ??? ??? ??? ??? ???
Improper access control in the Intel(R) oneAPI DPC++/C++ Compiler before version 2022.2.1 and Intel C++ Compiler Classic before version 2021.7.1 for some Intel(R) oneAPI Toolkits before version 2022.3.1 may allow an authenticated user to potentially enable escalation of privilege via local access.
5 CVE-2022-38136 427 2023-02-06 2023-03-17
0.0
 None ??? ??? ??? ??? ??? ???
Uncontrolled search path in the Intel(R) oneAPI DPC++/C++ Compiler for Windows and Intel Fortran Compiler for Windows before version 2022.2.1 for some Intel(R) oneAPI Toolkits before version 2022.3.1 may allow an authenticated user to potentially enable escalation of privilege via local access.
6 CVE-2022-38056 2023-02-16 2023-03-06
0.0
 None ??? ??? ??? ??? ??? ???
Improper neutralization in the Intel(R) EMA software before version 1.8.1.0 may allow a privileged user to potentially enable escalation of privilege via network access.
7 CVE-2022-37340 427 2023-02-16 2023-03-06
0.0
 None ??? ??? ??? ??? ??? ???
Uncontrolled search path in some Intel(R) QAT drivers for Windows before version 1.6 may allow an authenticated user to potentially enable escalation of privilege via local access.
8 CVE-2022-37329 427 2023-02-16 2023-03-06
0.0
 None ??? ??? ??? ??? ??? ???
Uncontrolled search path in some Intel(R) Quartus(R) Prime Pro and Standard Edition software may allow an authenticated user to potentially enable escalation of privilege via local access.
9 CVE-2022-36794 754 DoS 2023-02-16 2023-03-06
0.0
 None ??? ??? ??? ??? ??? ???
Improper condition check in some Intel(R) SPS firmware before version SPS_E3_06.00.03.300.0 may allow a privileged user to potentially enable denial of service via local access.
10 CVE-2022-36398 427 2023-02-16 2023-03-02
0.0
 None ??? ??? ??? ??? ??? ???
Uncontrolled search path in the Intel(R) Battery Life Diagnostic Tool software before version 2.2.0 may allow an authenticated user to potentially enable escalation of privilege via local access.
11 CVE-2022-36397 276 2023-02-16 2023-03-06
0.0
 None ??? ??? ??? ??? ??? ???
Incorrect default permissions in the software installer for some Intel(R) QAT drivers for Linux before version 4.17 may allow an authenticated user to potentially enable escalation of privilege via local access.
12 CVE-2022-36369 2023-02-16 2023-03-07
0.0
 None ??? ??? ??? ??? ??? ???
Improper access control in some QATzip software maintained by Intel(R) before version 1.0.9 may allow an authenticated user to potentially enable escalation of privilege via local access.
13 CVE-2022-36367 276 2022-11-11 2022-11-17
0.0
 None ??? ??? ??? ??? ??? ???
Incorrect default permissions in the Intel(R) Support Android application before version v22.02.28 may allow a privileged user to potentially enable information disclosure via local access.
14 CVE-2022-36348 2023-02-16 2023-03-06
0.0
 None ??? ??? ??? ??? ??? ???
Active debug code in some Intel (R) SPS firmware before version SPS_E5_04.04.04.300.0 may allow an authenticated user to potentially enable escalation of privilege via local access.
15 CVE-2022-36289 DoS 2023-02-16 2023-02-27
0.0
 None ??? ??? ??? ??? ??? ???
Protection mechanism failure in the Intel(R) Media SDK software before version 22.2.2 may allow an authenticated user to potentially enable denial of service via local access.
16 CVE-2022-36287 755 DoS 2023-02-16 2023-03-07
0.0
 None ??? ??? ??? ??? ??? ???
Uncaught exception in the FCS Server software maintained by Intel before version 1.1.79.3 may allow a privileged user to potentially enable denial of service via physical access.
17 CVE-2022-36278 670 2023-02-16 2023-03-02
0.0
 None ??? ??? ??? ??? ??? ???
Insufficient control flow management in the Intel(R) Battery Life Diagnostic Tool software before version 2.2.0 may allow an authenticated user to potentially enable escalation of privilege via local access.
18 CVE-2022-35883 476 DoS 2023-02-16 2023-02-27
0.0
 None ??? ??? ??? ??? ??? ???
NULL pointer dereference in the Intel(R) Media SDK software before version 22.2.2 may allow an authenticated user to potentially enable denial of service via local access.
19 CVE-2022-34864 125 2023-02-16 2023-03-01
0.0
 None ??? ??? ??? ??? ??? ???
Out-of-bounds read in the Intel(R) Trace Analyzer and Collector software before version 2021.5 may allow an authenticated user to potentially enable escalation of privilege via local access.
20 CVE-2022-34854 2023-02-16 2023-02-27
0.0
 None ??? ??? ??? ??? ??? ???
Improper access control in the Intel(R) SUR software before version 2.4.8902 may allow an authenticated user to potentially enable escalation of privilege via local access.
21 CVE-2022-34843 190 Overflow 2023-02-16 2023-03-02
0.0
 None ??? ??? ??? ??? ??? ???
Integer overflow in the Intel(R) Trace Analyzer and Collector software before version 2021.5 may allow an authenticated user to potentially enable escalation of privilege via local access.
22 CVE-2022-34841 119 Overflow 2023-02-16 2023-02-24
0.0
 None ??? ??? ??? ??? ??? ???
Improper buffer restrictions in the Intel(R) Media SDK software before version 22.2.2 may allow an authenticated user to potentially enable escalation of privilege via local access.
23 CVE-2022-34346 125 2023-02-16 2023-02-27
0.0
 None ??? ??? ??? ??? ??? ???
Out-of-bounds read in the Intel(R) Media SDK software before version 22.2.2 may allow an authenticated user to potentially enable escalation of privilege via local access.
24 CVE-2022-34157 2023-02-16 2023-03-06
0.0
 None ??? ??? ??? ??? ??? ???
Improper access control in the Intel(R) FPGA SDK for OpenCL(TM) with Intel(R) Quartus(R) Prime Pro Edition software before version 22.1 may allow authenticated user to potentially enable escalation of privilege via local access.
25 CVE-2022-34153 665 2023-02-16 2023-03-02
0.0
 None ??? ??? ??? ??? ??? ???
Improper initialization in the Intel(R) Battery Life Diagnostic Tool software before version 2.2.0 may allow an authenticated user to potentially enable escalation of privilege via local access.
26 CVE-2022-33964 20 2023-02-16 2023-02-27
0.0
 None ??? ??? ??? ??? ??? ???
Improper input validation in the Intel(R) SUR software before version 2.4.8902 may allow an unauthenticated user to potentially enable escalation of privilege via network access.
27 CVE-2022-33946 287 2023-02-16 2023-02-27
0.0
 None ??? ??? ??? ??? ??? ???
Improper authentication in the Intel(R) SUR software before version 2.4.8902 may allow an authenticated user to potentially enable escalation of privilege via local access.
28 CVE-2022-33942 2022-11-11 2022-11-17
0.0
 None ??? ??? ??? ??? ??? ???
Protection mechanism failure in the Intel(R) DCM software before version 5.0 may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access.
29 CVE-2022-33902 2023-02-16 2023-02-27
0.0
 None ??? ??? ??? ??? ??? ???
Insufficient control flow management in the Intel(R) Quartus Prime Pro and Standard edition software may allow an authenticated user to potentially enable escalation of privilege via local access.
30 CVE-2022-33892 22 Dir. Trav. 2023-02-16 2023-02-27
0.0
 None ??? ??? ??? ??? ??? ???
Path traversal in the Intel(R) Quartus Prime Pro and Standard edition software may allow an authenticated user to potentially enable escalation of privilege via local access.
31 CVE-2022-33190 20 2023-02-16 2023-02-27
0.0
 None ??? ??? ??? ??? ??? ???
Improper input validation in the Intel(R) SUR software before version 2.4.8902 may allow an authenticated user to potentially enable escalation of privilege via local access.
32 CVE-2022-32971 287 2023-02-16 2023-02-27
0.0
 None ??? ??? ??? ??? ??? ???
Improper authentication in the Intel(R) SUR software before version 2.4.8902 may allow a privileged user to potentially enable escalation of privilege via network access.
33 CVE-2022-32764 362 2023-02-16 2023-03-06
0.0
 None ??? ??? ??? ??? ??? ???
Description: Race condition in the Intel(R) DSA software before version 22.4.26 may allow an authenticated user to potentially enable escalation of privilege via local access.
34 CVE-2022-32575 787 2023-02-16 2023-03-02
0.0
 None ??? ??? ??? ??? ??? ???
Out-of-bounds write in the Intel(R) Trace Analyzer and Collector software before version 2021.5 may allow an authenticated user to potentially enable escalation of privilege via local access.
35 CVE-2022-32570 287 2023-02-16 2023-03-06
0.0
 None ??? ??? ??? ??? ??? ???
Improper authentication in the Intel(R) Quartus Prime Pro and Standard edition software may allow an authenticated user to potentially enable escalation of privilege via local access.
36 CVE-2022-32293 416 Exec Code 2022-08-03 2022-09-29
0.0
 None ??? ??? ??? ??? ??? ???
In ConnMan through 1.41, a man-in-the-middle attack against a WISPR HTTP query could be used to trigger a use-after-free in WISPR handling, leading to crashes or code execution.
37 CVE-2022-32292 787 Exec Code Overflow 2022-08-03 2022-09-29
0.0
 None ??? ??? ??? ??? ??? ???
In ConnMan through 1.41, remote attackers able to send HTTP requests to the gweb component are able to exploit a heap-based buffer overflow in received_data to execute code.
38 CVE-2022-31476 DoS 2023-02-16 2023-02-27
0.0
 None ??? ??? ??? ??? ??? ???
Improper access control in the Intel(R) SUR software before version 2.4.8902 may allow an authenticated user to potentially enable denial of service via local access.
39 CVE-2022-30944 522 2022-08-18 2022-12-09
0.0
 None ??? ??? ??? ??? ??? ???
Insufficiently protected credentials for Intel(R) AMT and Intel(R) Standard Manageability may allow a privileged user to potentially enable information disclosure via local access.
40 CVE-2022-30692 754 DoS 2023-02-16 2023-02-27
0.0
 None ??? ??? ??? ??? ??? ???
Improper conditions check in the Intel(R) SUR software before version 2.4.8902 may allow an unauthenticated user to potentially enable denial of service via network access.
41 CVE-2022-30691 400 DoS 2022-11-11 2022-11-17
0.0
 None ??? ??? ??? ??? ??? ???
Uncontrolled resource consumption in the Intel(R) Support Android application before version 22.02.28 may allow an authenticated user to potentially enable denial of service via local access.
42 CVE-2022-30601 522 2022-08-18 2022-12-09
0.0
 None ??? ??? ??? ??? ??? ???
Insufficiently protected credentials for Intel(R) AMT and Intel(R) Standard Manageability may allow an unauthenticated user to potentially enable information disclosure and escalation of privilege via network access.
43 CVE-2022-30548 427 2022-11-11 2022-11-17
0.0
 None ??? ??? ??? ??? ??? ???
Uncontrolled search path element in the Intel(R) Glorp software may allow an authenticated user to potentially enable escalation of privilege via local access.
44 CVE-2022-30530 2023-02-16 2023-03-06
0.0
 None ??? ??? ??? ??? ??? ???
Protection mechanism failure in the Intel(R) DSA software before version 22.4.26 may allow an authenticated user to potentially enable escalation of privilege via local access.
45 CVE-2022-30339 125 DoS 2023-02-16 2023-03-06
0.0
 None ??? ??? ??? ??? ??? ???
Out-of-bounds read in firmware for the Intel(R) Integrated Sensor Solution before versions 5.4.2.4579v3, 5.4.1.4479 and 5.0.0.4143 may allow a privileged user to potentially enable denial of service via local access.
46 CVE-2022-30297 79 XSS 2022-11-11 2022-11-17
0.0
 None ??? ??? ??? ??? ??? ???
Cross-site scripting in the Intel(R) EMA software before version 1.8.0 may allow a privileged user to potentially enable escalation of privilege via local access.
47 CVE-2022-30296 522 2022-08-18 2022-08-22
0.0
 None ??? ??? ??? ??? ??? ???
Insufficiently protected credentials in the Intel(R) Datacenter Group Event iOS application, all versions, may allow an unauthenticated user to potentially enable information disclosure via network access.
48 CVE-2022-29893 287 2022-11-11 2022-11-17
0.0
 None ??? ??? ??? ??? ??? ???
Improper authentication in firmware for Intel(R) AMT before versions 11.8.93, 11.22.93, 11.12.93, 12.0.92, 14.1.67, 15.0.42, 16.1.25 may allow an authenticated user to potentially enable escalation of privilege via network access.
49 CVE-2022-29515 401 DoS 2022-11-11 2022-11-17
0.0
 None ??? ??? ??? ??? ??? ???
Missing release of memory after effective lifetime in firmware for Intel(R) SPS before versions SPS_E3_06.00.03.035.0 may allow a privileged user to potentially enable denial of service via local access.
50 CVE-2022-29514 2023-02-16 2023-02-27
0.0
 None ??? ??? ??? ??? ??? ???
Improper access control in the Intel(R) SUR software before version 2.4.8902 may allow an unauthenticated user to potentially enable escalation of privilege via network access.
Total number of vulnerabilities : 662   Page : 1 (This Page)2 3 4 5 6 7 8 9 10 11 12 13 14
CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site. OVAL is a registered trademark of The MITRE Corporation and the authoritative source of OVAL content is MITRE's OVAL web site.
Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.