Intel

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2018-3657 2Intel Siemens 14Active Management Technology Firmware Converged Security Management Engine FirmwareManageability Engine Firmware+11 more Nov 21, 2024 Sep 12, 2018 N/A· v4 6.7 MEDIUM· v3 7.2 HIGH· v2 Multiple buffer overflows in Intel AMT in Intel CSME firmware versions before version 12.0.5 may allow a privileged user to potentially execute arbitrary code with Intel AMT execution privilege via local access.
CVE-2018-3655 1Intel 3Converged Security Management Engine Firmware Server Platform Services FirmwareTrusted Execution Engine Firmware Nov 21, 2024 Sep 12, 2018 N/A· v4 7.3 HIGH· v3 3.6 LOW· v2 A vulnerability in a subsystem in Intel CSME before version 11.21.55, Intel Server Platform Services before version 4.0 and Intel Trusted Execution Engine Firmware before version 3.1.55 may allow an unauthenticated user...Show more A vulnerability in a subsystem in Intel CSME before version 11.21.55, Intel Server Platform Services before version 4.0 and Intel Trusted Execution Engine Firmware before version 3.1.55 may allow an unauthenticated user to potentially modify or disclose information via physical access.Show less
CVE-2018-3643 1Intel 2Converged Security Management Engine Firmware Server Platform Services Firmware Nov 21, 2024 Sep 12, 2018 N/A· v4 8.2 HIGH· v3 4.6 MEDIUM· v2 A vulnerability in Power Management Controller firmware in systems using specific Intel(R) Converged Security and Management Engine (CSME) before version 11.8.55, 11.11.55, 11.21.55, 12.0.6 or Intel(R) Server Platform Se...Show more A vulnerability in Power Management Controller firmware in systems using specific Intel(R) Converged Security and Management Engine (CSME) before version 11.8.55, 11.11.55, 11.21.55, 12.0.6 or Intel(R) Server Platform Services firmware before version 4.x.04 may allow an attacker with administrative privileges to uncover certain platform secrets via local access or to potentially execute arbitrary code.Show less
CVE-2018-3616 2Intel Siemens 14Active Management Technology Firmware Converged Security Management Engine FirmwareManageability Engine Firmware+11 more Nov 21, 2024 Sep 12, 2018 N/A· v4 5.9 MEDIUM· v3 4.3 MEDIUM· v2 Bleichenbacher-style side channel vulnerability in TLS implementation in Intel Active Management Technology before 12.0.5 may allow an unauthenticated user to potentially obtain the TLS session key via the network.
CVE-2018-12176 1Intel 3Compute Card Firmware Compute Stick FirmwareNuc Kit Firmware Nov 21, 2024 Sep 12, 2018 N/A· v4 8.2 HIGH· v3 7.2 HIGH· v2 Improper input validation in firmware for Intel NUC Kits may allow a privileged user to potentially execute arbitrary code resulting in information disclosure, escalation of privilege and/or denial of service via local a...Show more Improper input validation in firmware for Intel NUC Kits may allow a privileged user to potentially execute arbitrary code resulting in information disclosure, escalation of privilege and/or denial of service via local access.Show less
CVE-2018-12175 1Intel 1Distribution For Python Nov 21, 2024 Sep 12, 2018 N/A· v4 7.8 HIGH· v3 4.6 MEDIUM· v2 Default install directory permissions in Intel Distribution for Python (IDP) version 2018 may allow an unprivileged user to escalate privileges via local access.
CVE-2018-12171 1Intel 1Bmc Firmware Nov 21, 2024 Sep 12, 2018 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Privilege escalation in Intel Baseboard Management Controller (BMC) firmware before version 1.43.91f76955 may allow an unprivileged user to potentially execute arbitrary code or perform denial of service over the network...Show more Privilege escalation in Intel Baseboard Management Controller (BMC) firmware before version 1.43.91f76955 may allow an unprivileged user to potentially execute arbitrary code or perform denial of service over the network.Show less
CVE-2018-12168 1Intel 1Computing Improvement Program Nov 21, 2024 Sep 12, 2018 N/A· v4 7.8 HIGH· v3 7.2 HIGH· v2 Privilege escalation in file permissions in Intel Computing Improvement Program before version 2.2.0.03942 may allow an authenticated user to potentially execute code as administrator via local access.
CVE-2018-12163 1Intel 1Iot Developers Kit Nov 21, 2024 Sep 12, 2018 N/A· v4 4.8 MEDIUM· v3 6.8 MEDIUM· v2 A DLL injection vulnerability in the Intel IoT Developers Kit 4.0 installer may allow an authenticated user to potentially escalate privileges using file modification via local access.
CVE-2018-12162 1Intel 1Openvino Toolkit Nov 21, 2024 Sep 12, 2018 N/A· v4 7.8 HIGH· v3 4.6 MEDIUM· v2 Directory permissions in the Intel OpenVINO Toolkit for Windows before version 2018.1.265 may allow an authenticated user to potentially execute code using default directory permissions via local access.
CVE-2018-12160 1Intel 1Data Migration Software Nov 21, 2024 Sep 12, 2018 N/A· v4 5.3 MEDIUM· v3 4.6 MEDIUM· v2 DLL injection vulnerability in software installer for Intel Data Center Migration Center Software v3.1 and before may allow an authenticated user to potentially execute code using default directory permissions via local...Show more DLL injection vulnerability in software installer for Intel Data Center Migration Center Software v3.1 and before may allow an authenticated user to potentially execute code using default directory permissions via local access.Show less
CVE-2018-12151 1Intel 1Extreme Tuning Utility Nov 21, 2024 Sep 12, 2018 N/A· v4 5.5 MEDIUM· v3 2.1 LOW· v2 Buffer overflow in installer for Intel Extreme Tuning Utility before 6.4.1.21 may allow an authenticated user to potentially cause a buffer overflow potentially leading to a denial of service via local access.
CVE-2018-12150 1Intel 1Extreme Tuning Utility Nov 21, 2024 Sep 12, 2018 N/A· v4 6.7 MEDIUM· v3 4.6 MEDIUM· v2 Escalation of privilege in Installer for Intel Extreme Tuning Utility before 6.4.1.21 may allow an authenticated user to potentially execute code or disclose information as administrator via local access.
CVE-2018-12149 1Intel 1Extreme Tuning Utility Nov 21, 2024 Sep 12, 2018 N/A· v4 5.5 MEDIUM· v3 2.1 LOW· v2 Buffer overflow in input handling in Intel Extreme Tuning Utility before 6.4.1.21 may allow an authenticated user to potentially deny service to the application via local access.
CVE-2018-12148 1Intel 1Driver & Support Assistant Nov 21, 2024 Sep 12, 2018 N/A· v4 7.8 HIGH· v3 7.2 HIGH· v2 Privilege escalation in file permissions in Intel Driver and Support Assistant before 3.5.0.1 may allow an authenticated user to potentially execute code as administrator via local access.
CVE-2018-10932 1Intel 1Lldptool Nov 21, 2024 Aug 21, 2018 N/A· v4 4.3 MEDIUM· v3 3.3 LOW· v2 lldptool version 1.0.1 and older can print a raw, unsanitized attacker controlled buffer when mngAddr information is displayed. This may allow an attacker to inject shell control characters into the buffer and impact the...Show more lldptool version 1.0.1 and older can print a raw, unsanitized attacker controlled buffer when mngAddr information is displayed. This may allow an attacker to inject shell control characters into the buffer and impact the behavior of the terminal.Show less
CVE-2018-3646 1Intel 8Core I3 Core I5Core I7+5 more May 29, 2026 Aug 14, 2018 N/A· v4 5.6 MEDIUM· v3 4.7 MEDIUM· v2 Systems with microprocessors utilizing speculative execution and address translations may allow unauthorized disclosure of information residing in the L1 data cache to an attacker with local user access with guest OS pri...Show more Systems with microprocessors utilizing speculative execution and address translations may allow unauthorized disclosure of information residing in the L1 data cache to an attacker with local user access with guest OS privilege via a terminal page fault and a side-channel analysis.Show less
CVE-2018-3620 1Intel 8Core I3 Core I5Core I7+5 more May 29, 2026 Aug 14, 2018 N/A· v4 5.6 MEDIUM· v3 4.7 MEDIUM· v2 Systems with microprocessors utilizing speculative execution and address translations may allow unauthorized disclosure of information residing in the L1 data cache to an attacker with local user access via a terminal pa...Show more Systems with microprocessors utilizing speculative execution and address translations may allow unauthorized disclosure of information residing in the L1 data cache to an attacker with local user access via a terminal page fault and a side-channel analysis.Show less
CVE-2018-3615 1Intel 30Core I3 Core I5Core I7+27 more May 29, 2026 Aug 14, 2018 N/A· v4 6.4 MEDIUM· v3 5.4 MEDIUM· v2 Systems with microprocessors utilizing speculative execution and Intel software guard extensions (Intel SGX) may allow unauthorized disclosure of information residing in the L1 data cache from an enclave to an attacker w...Show more Systems with microprocessors utilizing speculative execution and Intel software guard extensions (Intel SGX) may allow unauthorized disclosure of information residing in the L1 data cache from an enclave to an attacker with local user access via a side-channel analysis.Show less
CVE-2018-3672 1Intel 1Intel Smart Sound Technology Nov 21, 2024 Aug 1, 2018 N/A· v4 8.8 HIGH· v3 7.2 HIGH· v2 Driver module in Intel Smart Sound Technology before version 9.21.00.3541 potentially allows a local attacker to execute arbitrary code as administrator via a system calls.

Previous 1...808182...89 Next