# |
CVE ID
|
CWE ID
|
# of Exploits
|
Vulnerability Type(s)
|
Publish Date
|
Update Date
|
Score
|
Gained Access Level
|
Access
|
Complexity
|
Authentication
|
Conf.
|
Integ.
|
Avail.
|
1 |
CVE-2022-21226 |
125 |
|
|
2022-02-09 |
2022-02-15 |
2.1 |
None |
Local |
Low |
Not required |
Partial |
None |
None |
Out-of-bounds read in the Intel(R) Trace Analyzer and Collector before version 2021.5 may allow an authenticated user to potentially enable information disclosure via local access. |
2 |
CVE-2022-21218 |
755 |
|
|
2022-02-09 |
2022-02-15 |
2.1 |
None |
Local |
Low |
Not required |
Partial |
None |
None |
Uncaught exception in the Intel(R) Trace Analyzer and Collector before version 2021.5 may allow an authenticated user to potentially enable information disclosure via local access. |
3 |
CVE-2022-21166 |
459 |
|
|
2022-06-15 |
2022-08-19 |
2.1 |
None |
Local |
Low |
Not required |
Partial |
None |
None |
Incomplete cleanup in specific special register write operations for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access. |
4 |
CVE-2022-21157 |
863 |
|
|
2022-02-09 |
2022-02-17 |
2.1 |
None |
Local |
Low |
Not required |
Partial |
None |
None |
Improper access control in the Intel(R) Smart Campus Android application before version 6.1 may allow authenticated user to potentially enable information disclosure via local access. |
5 |
CVE-2022-21156 |
824 |
|
DoS |
2022-02-09 |
2022-02-15 |
2.1 |
None |
Local |
Low |
Not required |
None |
None |
Partial |
Access of uninitialized pointer in the Intel(R) Trace Analyzer and Collector before version 2021.5 may allow an authenticated user to potentially enable denial of service via local access. |
6 |
CVE-2022-21153 |
863 |
|
|
2022-02-09 |
2022-02-17 |
2.1 |
None |
Local |
Low |
Not required |
Partial |
None |
None |
Improper access control in the Intel(R) Capital Global Summit Android application may allow an authenticated user to potentially enable information disclosure via local access. |
7 |
CVE-2022-21133 |
125 |
|
DoS |
2022-02-09 |
2022-02-15 |
2.1 |
None |
Local |
Low |
Not required |
None |
None |
Partial |
Out-of-bounds read in the Intel(R) Trace Analyzer and Collector before version 2021.5 may allow an authenticated user to potentially enable denial of service via local access. |
8 |
CVE-2022-21127 |
459 |
|
|
2022-06-15 |
2023-01-31 |
2.1 |
None |
Local |
Low |
Not required |
Partial |
None |
None |
Incomplete cleanup in specific special register read operations for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access. |
9 |
CVE-2022-21125 |
459 |
|
|
2022-06-15 |
2022-08-19 |
2.1 |
None |
Local |
Low |
Not required |
Partial |
None |
None |
Incomplete cleanup of microarchitectural fill buffers on some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access. |
10 |
CVE-2022-21123 |
459 |
|
|
2022-06-15 |
2022-08-19 |
2.1 |
None |
Local |
Low |
Not required |
Partial |
None |
None |
Incomplete cleanup of multi-core shared buffers for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access. |
11 |
CVE-2022-0002 |
|
|
|
2022-03-11 |
2022-08-19 |
2.1 |
None |
Local |
Low |
Not required |
Partial |
None |
None |
Non-transparent sharing of branch predictor within a context in some Intel(R) Processors may allow an authorized user to potentially enable information disclosure via local access. |
12 |
CVE-2022-0001 |
|
|
|
2022-03-11 |
2022-08-19 |
2.1 |
None |
Local |
Low |
Not required |
Partial |
None |
None |
Non-transparent sharing of branch predictor selectors between contexts in some Intel(R) Processors may allow an authorized user to potentially enable information disclosure via local access. |
13 |
CVE-2021-33166 |
276 |
|
|
2022-02-09 |
2022-02-15 |
2.1 |
None |
Local |
Low |
Not required |
Partial |
None |
None |
Incorrect default permissions for the Intel(R) RXT for Chromebook application, all versions, may allow an authenticated user to potentially enable information disclosure via local access. |
14 |
CVE-2021-33147 |
754 |
|
|
2022-02-09 |
2022-02-15 |
2.1 |
None |
Local |
Low |
Not required |
Partial |
None |
None |
Improper conditions check in the Intel(R) IPP Crypto library before version 2021.2 may allow an authenticated user to potentially enable information disclosure via local access. |
15 |
CVE-2021-33135 |
400 |
|
DoS |
2022-05-12 |
2022-05-24 |
2.1 |
None |
Local |
Low |
Not required |
None |
None |
Partial |
Uncontrolled resource consumption in the Linux kernel drivers for Intel(R) SGX may allow an authenticated user to potentially enable denial of service via local access. |
16 |
CVE-2021-33119 |
|
|
|
2022-02-09 |
2022-07-12 |
2.1 |
None |
Local |
Low |
Not required |
Partial |
None |
None |
Improper access control in the Intel(R) RealSense(TM) DCM before version 20210625 may allow an authenticated user to potentially enable information disclosure via local access. |
17 |
CVE-2021-33107 |
522 |
|
|
2022-02-09 |
2022-07-28 |
2.1 |
None |
Local |
Low |
Not required |
Partial |
None |
None |
Insufficiently protected credentials in USB provisioning for Intel(R) AMT SDK before version 16.0.3, Intel(R) SCS before version 12.2 and Intel(R) MEBx before versions 11.0.0.0012, 12.0.0.0011, 14.0.0.0004 and 15.0.0.0004 may allow an unauthenticated user to potentially enable information disclosure via physical access. |
18 |
CVE-2021-33073 |
400 |
|
DoS |
2021-11-17 |
2021-11-22 |
2.1 |
None |
Local |
Low |
Not required |
None |
None |
Partial |
Uncontrolled resource consumption in the Intel(R) Distribution of OpenVINOâ„¢ Toolkit before version 2021.4 may allow an unauthenticated user to potentially enable denial of service via local access. |
19 |
CVE-2021-26314 |
668 |
|
|
2021-06-09 |
2022-06-03 |
2.1 |
None |
Local |
Low |
Not required |
Partial |
None |
None |
Potential floating point value injection in all supported CPU products, in conjunction with software vulnerabilities relating to speculative execution with incorrect floating point results, may cause the use of incorrect data from FPVI and may result in data leakage. |
20 |
CVE-2021-26313 |
203 |
|
Exec Code Bypass |
2021-06-09 |
2022-08-01 |
2.1 |
None |
Local |
Low |
Not required |
Partial |
None |
None |
Potential speculative code store bypass in all supported CPU products, in conjunction with software vulnerabilities relating to speculative execution of overwritten instructions, may cause an incorrect speculation and could result in data leakage. |
21 |
CVE-2021-0182 |
400 |
|
|
2021-11-17 |
2021-11-22 |
2.1 |
None |
Local |
Low |
Not required |
Partial |
None |
None |
Uncontrolled resource consumption in the Intel(R) HAXM software before version 7.6.6 may allow an unauthenticated user to potentially enable information disclosure via local access. |
22 |
CVE-2021-0147 |
662 |
|
DoS |
2022-02-09 |
2022-02-15 |
2.1 |
None |
Local |
Low |
Not required |
None |
None |
Partial |
Improper locking in the Power Management Controller (PMC) for some Intel Chipset firmware before versions pmc_fw_lbg_c1-21ww02a and pmc_fw_lbg_b0-21ww02a may allow a privileged user to potentially enable denial of service via local access. |
23 |
CVE-2021-0145 |
665 |
|
|
2022-02-09 |
2022-02-15 |
2.1 |
None |
Local |
Low |
Not required |
Partial |
None |
None |
Improper initialization of shared resources in some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access. |
24 |
CVE-2021-0127 |
|
|
DoS |
2022-02-09 |
2022-02-15 |
2.1 |
None |
Local |
Low |
Not required |
None |
None |
Partial |
Insufficient control flow management in some Intel(R) Processors may allow an authenticated user to potentially enable a denial of service via local access. |
25 |
CVE-2021-0093 |
276 |
|
DoS |
2022-02-09 |
2022-02-25 |
2.1 |
None |
Local |
Low |
Not required |
None |
None |
Partial |
Incorrect default permissions in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable a denial of service via local access. |
26 |
CVE-2021-0092 |
400 |
|
DoS |
2022-02-09 |
2022-02-25 |
2.1 |
None |
Local |
Low |
Not required |
None |
None |
Partial |
Improper access control in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable a denial of service via local access. |
27 |
CVE-2021-0086 |
203 |
|
|
2021-06-09 |
2021-07-01 |
2.1 |
None |
Local |
Low |
Not required |
Partial |
None |
None |
Observable response discrepancy in floating-point operations for some Intel(R) Processors may allow an authorized user to potentially enable information disclosure via local access. |
28 |
CVE-2021-0001 |
203 |
|
|
2021-06-09 |
2021-06-28 |
2.1 |
None |
Local |
Low |
Not required |
Partial |
None |
None |
Observable timing discrepancy in Intel(R) IPP before version 2020 update 1 may allow authorized user to potentially enable information disclosure via local access. |
29 |
CVE-2020-24513 |
|
|
Bypass |
2021-06-09 |
2022-04-22 |
2.1 |
None |
Local |
Low |
Not required |
Partial |
None |
None |
Domain-bypass transient execution vulnerability in some Intel Atom(R) Processors may allow an authenticated user to potentially enable information disclosure via local access. |
30 |
CVE-2020-24512 |
203 |
|
|
2021-06-09 |
2021-09-09 |
2.1 |
None |
Local |
Low |
Not required |
Partial |
None |
None |
Observable timing discrepancy in some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access. |
31 |
CVE-2020-24511 |
668 |
|
|
2021-06-09 |
2021-09-09 |
2.1 |
None |
Local |
Low |
Not required |
Partial |
None |
None |
Improper isolation of shared resources in some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access. |
32 |
CVE-2020-24480 |
787 |
|
DoS |
2021-02-17 |
2021-02-23 |
2.1 |
None |
Local |
Low |
Not required |
None |
None |
Partial |
Out-of-bounds write in the Intel(R) XTU before version 6.5.3.25 may allow a privileged user to potentially enable denial of service via local access. |
33 |
CVE-2020-24460 |
276 |
|
DoS |
2020-11-12 |
2020-11-20 |
2.1 |
None |
Local |
Low |
Not required |
None |
None |
Partial |
Incorrect default permissions in the Intel(R) DSA before version 20.8.30.6 may allow an authenticated user to potentially enable denial of service via local access. |
34 |
CVE-2020-24452 |
20 |
|
DoS |
2021-02-17 |
2021-02-23 |
2.1 |
None |
Local |
Low |
Not required |
None |
None |
Partial |
Improper input validation in the Intel(R) SGX Platform Software for Windows* may allow an authenticated user to potentially enable a denial of service via local access. |
35 |
CVE-2020-24448 |
|
|
DoS |
2021-02-17 |
2021-02-23 |
2.1 |
None |
Local |
Low |
Not required |
None |
None |
Partial |
Uncaught exception in some Intel(R) Graphics Drivers before version 15.33.51.5146 may allow an authenticated user to potentially enable denial of service via local access. |
36 |
CVE-2020-12386 |
787 |
|
DoS |
2021-02-17 |
2021-02-23 |
2.1 |
None |
Local |
Low |
Not required |
None |
None |
Partial |
Out-of-bounds write in some Intel(R) Graphics Drivers before version 15.36.39.5143 may allow an authenticated user to potentially enable denial of service via local access. |
37 |
CVE-2020-12372 |
252 |
|
DoS |
2021-02-17 |
2021-02-22 |
2.1 |
None |
Local |
Low |
Not required |
None |
None |
Partial |
Unchecked return value in some Intel(R) Graphics Drivers before version 26.20.100.8141 may allow a privileged user to potentially enable a denial of service via local access. |
38 |
CVE-2020-12371 |
369 |
|
DoS |
2021-02-17 |
2021-02-22 |
2.1 |
None |
Local |
Low |
Not required |
None |
None |
Partial |
Divide by zero in some Intel(R) Graphics Drivers before version 26.20.100.8141 may allow a privileged user to potentially enable a denial of service via local access. |
39 |
CVE-2020-12370 |
476 |
|
DoS |
2021-02-17 |
2021-07-21 |
2.1 |
None |
Local |
Low |
Not required |
None |
None |
Partial |
Untrusted pointer dereference in some Intel(R) Graphics Drivers before version 26.20.100.8141 may allow a privileged user to potentially enable a denial of service via local access. |
40 |
CVE-2020-12365 |
476 |
|
DoS |
2021-02-17 |
2021-07-21 |
2.1 |
None |
Local |
Low |
Not required |
None |
None |
Partial |
Untrusted pointer dereference in some Intel(R) Graphics Drivers before versions 15.33.51.5146, 15.45.32.5145, 15.36.39.5144 and 15.40.46.5143 may allow an authenticated user to potentially denial of service via local access. |
41 |
CVE-2020-12364 |
476 |
|
DoS |
2021-02-17 |
2021-02-22 |
2.1 |
None |
Local |
Low |
Not required |
None |
None |
Partial |
Null pointer reference in some Intel(R) Graphics Drivers for Windows* before version 26.20.100.7212 and before version Linux kernel version 5.5 may allow a privileged user to potentially enable a denial of service via local access. |
42 |
CVE-2020-12363 |
20 |
|
DoS |
2021-02-17 |
2021-02-22 |
2.1 |
None |
Local |
Low |
Not required |
None |
None |
Partial |
Improper input validation in some Intel(R) Graphics Drivers for Windows* before version 26.20.100.7212 and before Linux kernel version 5.5 may allow a privileged user to potentially enable a denial of service via local access. |
43 |
CVE-2020-12361 |
416 |
|
DoS |
2021-02-17 |
2021-02-22 |
2.1 |
None |
Local |
Low |
Not required |
None |
None |
Partial |
Use after free in some Intel(R) Graphics Drivers before version 15.33.51.5146 may allow an authenticated user to potentially enable denial of service via local access. |
44 |
CVE-2020-12356 |
125 |
|
|
2020-11-12 |
2020-11-18 |
2.1 |
None |
Local |
Low |
Not required |
Partial |
None |
None |
Out-of-bounds read in subsystem in Intel(R) AMT versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70 and 14.0.45 may allow a privileged user to potentially enable information disclosure via local access. |
45 |
CVE-2020-12328 |
200 |
|
+Info |
2020-11-12 |
2021-07-21 |
2.1 |
None |
Local |
Low |
Not required |
Partial |
None |
None |
Protection mechanism failure in some Intel(R) Thunderbolt(TM) DCH drivers for Windows* before version 72 may allow a privileged user to potentially enable information disclosure via local access. |
46 |
CVE-2020-12327 |
1188 |
|
|
2020-11-12 |
2020-11-24 |
2.1 |
None |
Local |
Low |
Not required |
Partial |
None |
None |
Insecure default variable initialization in some Intel(R) Thunderbolt(TM) DCH drivers for Windows* before version 72 may allow a privileged user to potentially enable information disclosure via local access. |
47 |
CVE-2020-12326 |
665 |
|
|
2020-11-12 |
2020-11-24 |
2.1 |
None |
Local |
Low |
Not required |
Partial |
None |
None |
Improper initialization in some Intel(R) Thunderbolt(TM) DCH drivers for Windows* before version 72 may allow an authenticated user to potentially enable information disclosure via local access. |
48 |
CVE-2020-12316 |
522 |
|
|
2020-11-12 |
2020-11-20 |
2.1 |
None |
Local |
Low |
Not required |
Partial |
None |
None |
Insufficiently protected credentials in the Intel(R) EMA before version 1.3.3 may allow an authorized user to potentially enable information disclosure via local access. |
49 |
CVE-2020-8767 |
755 |
|
DoS |
2020-11-12 |
2020-11-30 |
2.1 |
None |
Local |
Low |
Not required |
None |
None |
Partial |
Uncaught exception in the Intel(R) 50GbE IP Core for Intel(R) Quartus Prime before version 20.2 may allow an authenticated user to potentially enable denial of service via local access. |
50 |
CVE-2020-8761 |
326 |
|
|
2020-11-12 |
2020-11-30 |
2.1 |
None |
Local |
Low |
Not required |
Partial |
None |
None |
Inadequate encryption strength in subsystem for Intel(R) CSME versions before 13.0.40 and 13.30.10 may allow an unauthenticated user to potentially enable information disclosure via physical access. |