# |
CVE ID
|
CWE ID
|
# of Exploits
|
Vulnerability Type(s)
|
Publish Date
|
Update Date
|
Score
|
Gained Access Level
|
Access
|
Complexity
|
Authentication
|
Conf.
|
Integ.
|
Avail.
|
1 |
CVE-2022-24436 |
203 |
|
|
2022-06-15 |
2022-06-28 |
4.0 |
None |
Remote |
Low |
??? |
Partial |
None |
None |
Observable behavioral in power management throttling for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via network access. |
2 |
CVE-2022-22139 |
427 |
|
|
2022-05-12 |
2022-05-23 |
4.4 |
None |
Local |
Medium |
Not required |
Partial |
Partial |
Partial |
Uncontrolled search path in the Intel(R) XTU software before version 7.3.0.33 may allow an authenticated user to potentially enable escalation of privilege via local access. |
3 |
CVE-2022-21220 |
611 |
|
|
2022-02-09 |
2022-02-15 |
4.6 |
None |
Local |
Low |
Not required |
Partial |
Partial |
Partial |
Improper restriction of XML external entity for Intel(R) Quartus(R) Prime Pro Edition before version 21.3 may allow an authenticated user to potentially enable escalation of privilege via local access. |
4 |
CVE-2022-21204 |
276 |
|
|
2022-02-09 |
2022-02-15 |
4.6 |
None |
Local |
Low |
Not required |
Partial |
Partial |
Partial |
Improper permissions for Intel(R) Quartus(R) Prime Pro Edition before version 21.3 may allow an authenticated user to potentially enable escalation of privilege via local access. |
5 |
CVE-2022-21203 |
281 |
|
|
2022-02-09 |
2022-02-15 |
4.6 |
None |
Local |
Low |
Not required |
Partial |
Partial |
Partial |
Improper permissions in the SafeNet Sentinel driver for Intel(R) Quartus(R) Prime Standard Edition before version 21.1 may allow an authenticated user to potentially enable escalation of privilege via local access. |
6 |
CVE-2022-21174 |
863 |
|
|
2022-02-09 |
2022-02-17 |
4.6 |
None |
Local |
Low |
Not required |
Partial |
Partial |
Partial |
Improper access control in a third-party component of Intel(R) Quartus(R) Prime Pro Edition before version 21.3 may allow an authenticated user to potentially enable escalation of privilege via local access. |
7 |
CVE-2022-21128 |
269 |
|
|
2022-05-12 |
2022-05-23 |
4.6 |
None |
Local |
Low |
Not required |
Partial |
Partial |
Partial |
Insufficient control flow management in the Intel(R) Advisor software before version 7.6.0.37 may allow an authenticated user to potentially enable escalation of privilege via local access. |
8 |
CVE-2021-44454 |
20 |
|
|
2022-02-09 |
2022-02-16 |
4.6 |
None |
Local |
Low |
Not required |
Partial |
Partial |
Partial |
Improper input validation in a third-party component for Intel(R) Quartus(R) Prime Pro Edition before version 21.3 may allow an authenticated user to potentially enable escalation of privilege via local access. |
9 |
CVE-2021-33150 |
|
|
|
2022-03-11 |
2022-03-18 |
4.6 |
None |
Local |
Low |
Not required |
Partial |
Partial |
Partial |
Hardware allows activation of test or debug logic at runtime for some Intel(R) Trace Hub instances which may allow an unauthenticated user to potentially enable escalation of privilege via physical access. |
10 |
CVE-2021-33137 |
787 |
|
|
2022-02-09 |
2022-02-15 |
4.6 |
None |
Local |
Low |
Not required |
Partial |
Partial |
Partial |
Out-of-bounds write in the Intel(R) Kernelflinger project may allow an authenticated user to potentially enable escalation of privilege via local access. |
11 |
CVE-2021-33129 |
276 |
|
|
2022-02-09 |
2022-02-15 |
4.6 |
None |
Local |
Low |
Not required |
Partial |
Partial |
Partial |
Incorrect default permissions in the software installer for the Intel(R) Advisor before version 2021.4.0 may allow an authenticated user to potentially enable escalation of privilege via local access. |
12 |
CVE-2021-33118 |
863 |
|
|
2021-11-17 |
2021-11-23 |
4.6 |
None |
Local |
Low |
Not required |
Partial |
Partial |
Partial |
Improper access control in the software installer for the Intel(R) Serial IO driver for Intel(R) NUC 11 Gen before version 30.100.2104.1 may allow an authenticated user to potentially enable escalation of privilege via local access. |
13 |
CVE-2021-33108 |
20 |
|
|
2022-05-12 |
2022-05-23 |
4.6 |
None |
Local |
Low |
Not required |
Partial |
Partial |
Partial |
Improper input validation in the Intel(R) In-Band Manageability software before version 2.13.0 may allow a privileged user to potentially enable escalation of privilege via local access. |
14 |
CVE-2021-33106 |
190 |
|
Overflow |
2021-11-17 |
2021-11-19 |
4.6 |
None |
Local |
Low |
Not required |
Partial |
Partial |
Partial |
Integer overflow in the Safestring library maintained by Intel(R) may allow an authenticated user to potentially enable escalation of privilege via local access. |
15 |
CVE-2021-33101 |
427 |
|
|
2022-02-09 |
2022-02-15 |
4.6 |
None |
Local |
Low |
Not required |
Partial |
Partial |
Partial |
Uncontrolled search path in the Intel(R) GPA software before version 21.2 may allow an authenticated user to potentially enable escalation of privilege via local access. |
16 |
CVE-2021-33071 |
276 |
|
|
2021-11-17 |
2021-11-22 |
4.6 |
None |
Local |
Low |
Not required |
Partial |
Partial |
Partial |
Incorrect default permissions in the installer for the Intel(R) oneAPI Rendering Toolkit before version 2021.2 may allow an authenticated user to potentially enable escalation of privilege via local access. |
17 |
CVE-2021-33068 |
476 |
|
DoS |
2022-02-09 |
2022-02-15 |
4.0 |
None |
Remote |
Low |
??? |
None |
None |
Partial |
Null pointer dereference in subsystem for Intel(R) AMT before versions 15.0.35 may allow an authenticated user to potentially enable denial of service via network access. |
18 |
CVE-2021-33062 |
276 |
|
|
2021-11-17 |
2021-11-22 |
4.6 |
None |
Local |
Low |
Not required |
Partial |
Partial |
Partial |
Incorrect default permissions in the software installer for the Intel(R) VTune(TM) Profiler before version 2021.3.0 may allow an authenticated user to potentially enable escalation of privilege via local access. |
19 |
CVE-2021-33059 |
20 |
|
|
2021-11-17 |
2021-12-14 |
4.6 |
None |
Local |
Low |
Not required |
Partial |
Partial |
Partial |
Improper input validation in the Intel(R) Administrative Tools for Intel(R) Network Adapters driver for Windows before version 1.4.0.15, may allow a privileged user to potentially enable escalation of privilege via local access. |
20 |
CVE-2021-33058 |
863 |
|
|
2021-11-17 |
2021-12-14 |
4.6 |
None |
Local |
Low |
Not required |
Partial |
Partial |
Partial |
Improper access control in the installer Intel(R)Administrative Tools for Intel(R) Network Adaptersfor Windowsbefore version 1.4.0.21 may allow an unauthenticated user to potentially enable escalation of privilege via local access. |
21 |
CVE-2021-26258 |
|
|
|
2022-05-12 |
2022-07-12 |
4.6 |
None |
Local |
Low |
Not required |
Partial |
Partial |
Partial |
Improper access control for the Intel(R) Killer(TM) Control Center software before version 2.4.3337.0 may allow an authorized user to potentially enable escalation of privilege via local access. |
22 |
CVE-2021-23152 |
|
|
|
2022-02-09 |
2022-07-12 |
4.6 |
None |
Local |
Low |
Not required |
Partial |
Partial |
Partial |
Improper access control in the Intel(R) Advisor software before version 2021.2 may allow an authenticated user to potentially enable escalation of privilege via local access. |
23 |
CVE-2021-0186 |
20 |
|
|
2021-11-17 |
2021-11-23 |
4.6 |
None |
Local |
Low |
Not required |
Partial |
Partial |
Partial |
Improper input validation in the Intel(R) SGX SDK applications compiled for SGX2 enabled processors may allow a privileged user to potentially escalation of privilege via local access. |
24 |
CVE-2021-0180 |
400 |
|
|
2021-11-17 |
2021-11-22 |
4.6 |
None |
Local |
Low |
Not required |
Partial |
Partial |
Partial |
Uncontrolled resource consumption in the Intel(R) HAXM software before version 7.6.6 may allow an unauthenticated user to potentially enable privilege escalation via local access. |
25 |
CVE-2021-0158 |
20 |
|
|
2021-11-17 |
2021-11-22 |
4.6 |
None |
Local |
Low |
Not required |
Partial |
Partial |
Partial |
Improper input validation in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access. |
26 |
CVE-2021-0157 |
|
|
|
2021-11-17 |
2022-05-03 |
4.6 |
None |
Local |
Low |
Not required |
Partial |
Partial |
Partial |
Insufficient control flow management in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access. |
27 |
CVE-2021-0143 |
276 |
|
|
2021-06-17 |
2021-06-23 |
4.6 |
None |
Local |
Low |
Not required |
Partial |
Partial |
Partial |
Improper permissions in the installer for the Intel(R) Brand Verification Tool before version 11.0.0.1225 may allow an authenticated user to potentially enable escalation of privilege via local access. |
28 |
CVE-2021-0135 |
20 |
|
|
2021-11-17 |
2021-11-22 |
4.6 |
None |
Local |
Low |
Not required |
Partial |
Partial |
Partial |
Improper input validation in the Intel(R) Ethernet Diagnostic Driver for Windows before version 1.4.0.10 may allow a privileged user to potentially enable escalation of privilege via local access. |
29 |
CVE-2021-0115 |
120 |
|
Overflow |
2022-02-09 |
2022-02-25 |
4.6 |
None |
Local |
Low |
Not required |
Partial |
Partial |
Partial |
Buffer overflow in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access. |
30 |
CVE-2021-0112 |
428 |
|
|
2021-06-09 |
2021-06-22 |
4.4 |
None |
Local |
Medium |
Not required |
Partial |
Partial |
Partial |
Unquoted service path in the Intel Unite(R) Client for Windows before version 4.2.25031 may allow an authenticated user to potentially enable an escalation of privilege via local access. |
31 |
CVE-2021-0111 |
476 |
|
|
2022-02-09 |
2022-02-25 |
4.6 |
None |
Local |
Low |
Not required |
Partial |
Partial |
Partial |
NULL pointer dereference in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable an escalation of privilege via local access. |
32 |
CVE-2021-0108 |
427 |
|
|
2021-06-09 |
2021-06-22 |
4.4 |
None |
Local |
Medium |
Not required |
Partial |
Partial |
Partial |
Uncontrolled search path in the Intel Unite(R) Client for Windows before version 4.2.25031 may allow an authenticated user to potentially enable an escalation of privilege via local access. |
33 |
CVE-2021-0107 |
252 |
|
|
2022-02-09 |
2022-02-25 |
4.6 |
None |
Local |
Low |
Not required |
Partial |
Partial |
Partial |
Unchecked return value in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access. |
34 |
CVE-2021-0104 |
427 |
|
|
2021-06-09 |
2021-06-28 |
4.4 |
None |
Local |
Medium |
Not required |
Partial |
Partial |
Partial |
Uncontrolled search path element in the installer for the Intel(R) Rapid Storage Technology software, before versions 17.9.0.34, 18.0.0.640 and 18.1.0.24, may allow an authenticated user to potentially enable escalation of privilege via local access. |
35 |
CVE-2021-0103 |
|
|
|
2022-02-09 |
2022-07-12 |
4.6 |
None |
Local |
Low |
Not required |
Partial |
Partial |
Partial |
Insufficient control flow management in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable an escalation of privilege via local access. |
36 |
CVE-2021-0102 |
732 |
|
|
2021-06-09 |
2021-06-22 |
4.6 |
None |
Local |
Low |
Not required |
Partial |
Partial |
Partial |
Insecure inherited permissions in the Intel Unite(R) Client for Windows before version 4.2.25031 may allow an authenticated user to potentially enable an escalation of privilege via local access. |
37 |
CVE-2021-0100 |
276 |
|
|
2021-06-09 |
2021-06-17 |
4.6 |
None |
Local |
Low |
Not required |
Partial |
Partial |
Partial |
Incorrect default permissions in the installer for the Intel(R) SSD Data Center Tool, versions downloaded before 12/31/2020, may allow an authenticated user to potentially enable escalation of privilege via local access. |
38 |
CVE-2021-0099 |
|
|
|
2022-02-09 |
2022-07-12 |
4.6 |
None |
Local |
Low |
Not required |
Partial |
Partial |
Partial |
Insufficient control flow management in the firmware for some Intel(R) Processors may allow an authenticated user to potentially enable an escalation of privilege via local access. |
39 |
CVE-2021-0098 |
|
|
|
2021-06-09 |
2022-07-12 |
4.6 |
None |
Local |
Low |
Not required |
Partial |
Partial |
Partial |
Improper access control in the Intel Unite(R) Client for Windows before version 4.2.25031 may allow an authenticated user to potentially enable an escalation of privilege via local access. |
40 |
CVE-2021-0094 |
59 |
|
|
2021-06-09 |
2021-06-23 |
4.6 |
None |
Local |
Low |
Not required |
Partial |
Partial |
Partial |
Improper link resolution before file access in Intel(R) DSA before version 20.11.50.9 may allow an authenticated user to potentially enable an escalation of privilege via local access. |
41 |
CVE-2021-0090 |
427 |
|
|
2021-06-09 |
2021-06-23 |
4.4 |
None |
Local |
Medium |
Not required |
Partial |
Partial |
Partial |
Uncontrolled search path element in Intel(R) DSA before version 20.11.50.9 may allow an authenticated user to potentially enable an escalation of privilege via local access. |
42 |
CVE-2021-0077 |
732 |
|
|
2021-06-09 |
2022-05-03 |
4.6 |
None |
Local |
Low |
Not required |
Partial |
Partial |
Partial |
Insecure inherited permissions in the installer for the Intel(R) VTune(TM) Profiler before version 2021.1.1 may allow an authenticated user to potentially enable escalation of privilege via local access. |
43 |
CVE-2021-0074 |
281 |
|
|
2021-06-09 |
2021-06-24 |
4.6 |
None |
Local |
Low |
Not required |
Partial |
Partial |
Partial |
Improper permissions in the installer for the Intel(R) Computing Improvement Program software before version 2.4.5982 may allow an authenticated user to potentially enable escalation of privilege via local access. |
44 |
CVE-2021-0073 |
|
|
|
2021-06-09 |
2021-06-23 |
4.6 |
None |
Local |
Low |
Not required |
Partial |
Partial |
Partial |
Insufficient control flow management in Intel(R) DSA before version 20.11.50.9 may allow an authenticated user to potentially enable escalation of privilege via local access. |
45 |
CVE-2021-0052 |
269 |
|
|
2021-06-09 |
2021-06-24 |
4.6 |
None |
Local |
Low |
Not required |
Partial |
Partial |
Partial |
Incorrect default privileges in the Intel(R) Computing Improvement Program before version 2.4.6522 may allow an authenticated user to potentially enable an escalation of privilege via local access. |
46 |
CVE-2020-24509 |
|
|
|
2021-06-09 |
2021-06-22 |
4.6 |
None |
Local |
Low |
Not required |
Partial |
Partial |
Partial |
Insufficient control flow management in subsystem in Intel(R) SPS versions before SPS_E3_05.01.04.300.0, SPS_SoC-A_05.00.03.091.0, SPS_E5_04.04.04.023.0, or SPS_E5_04.04.03.263.0 may allow a privileged user to potentially enable escalation of privilege via local access. |
47 |
CVE-2020-24489 |
459 |
|
|
2021-06-09 |
2022-04-06 |
4.6 |
None |
Local |
Low |
Not required |
Partial |
Partial |
Partial |
Incomplete cleanup in some Intel(R) VT-d products may allow an authenticated user to potentially enable escalation of privilege via local access. |
48 |
CVE-2020-24485 |
427 |
|
|
2021-02-17 |
2021-06-09 |
4.4 |
None |
Local |
Medium |
Not required |
Partial |
Partial |
Partial |
Improper conditions check in the Intel(R) FPGA OPAE Driver for Linux before kernel version 4.17 may allow an authenticated user to potentially enable escalation of privilege via local access. |
49 |
CVE-2020-24481 |
|
|
|
2021-02-17 |
2021-02-23 |
4.6 |
None |
Local |
Low |
Not required |
Partial |
Partial |
Partial |
Insecure inherited permissions for the Intel(R) Quartus Prime Pro and Standard edition software may allow an authenticated user to potentially enable escalation of privilege via local access. |
50 |
CVE-2020-24462 |
787 |
|
|
2021-02-17 |
2021-02-23 |
4.6 |
None |
Local |
Low |
Not required |
Partial |
Partial |
Partial |
Out of bounds write in the Intel(R) Graphics Driver before version 15.33.53.5161, 15.36.40.5162, 15.40.47.5166, 15.45.33.5164 and 27.20.100.8336 may allow an authenticated user to potentially enable an escalation of privilege via local access. |