Intel vulnerabilities, page 2

1,779 vulnerabilities

Known vulnerabilities in Intel products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 5,184 products.

5.5CVE-2018-12206intel corporationintel quickassist technology for linux+1
EPSS score
0.28%
Improper configuration of hardware access in Intel QuickAssist Technology for Linux (all versions) may allow an authenticated user to potentially enable a denial of service via local access.
8.2CVE-2018-12176intel corporationintel(r) nuc kits and intel(r) compute cards+3
EPSS score
0.41%
Improper input validation in firmware for Intel NUC Kits may allow a privileged user to potentially execute arbitrary code resulting in information disclosure, escalation of privilege and/or denial of service via local access.
7.8CVE-2018-12162intel corporationintel(r) openvino(tm) toolkit for windows+1
EPSS score
0.32%
Directory permissions in the Intel OpenVINO Toolkit for Windows before version 2018.1.265 may allow an authenticated user to potentially execute code using default directory permissions via local access.
5.5CVE-2018-12193intel corporationintel quickassit technology for linux+1
EPSS score
0.36%
Insufficient access control in driver stack for Intel QuickAssist Technology for Linux before version 4.2 may allow an unprivileged user to potentially disclose information via local access.
6.8CVE-2018-12163intel corporationintel iot developers kit+1
EPSS score
0.51%
A DLL injection vulnerability in the Intel IoT Developers Kit 4.0 installer may allow an authenticated user to potentially escalate privileges using file modification via local access.
7.2CVE-2018-12202ubuntuintel-microcode+3
EPSS score
0.39%
Privilege escalation vulnerability in Platform Sample/ Silicon Reference firmware for 8th Generation Intel(R) Core Processor, 7th Generation Intel(R) Core Processor may allow privileged user to potentially leverage existing features via local access.
7.2CVE-2018-12203ubuntuintel-microcode+3
EPSS score
0.45%
Denial of service vulnerability in Platform Sample/ Silicon Reference firmware for 8th Generation Intel Core Processor, 7th Generation Intel Core Processor may allow privileged user to potentially execute arbitrary code via local access.
7.8CVE-2018-12148intel corporationintel(r) driver & support assistant+1
EPSS score
0.35%
Privilege escalation in file permissions in Intel Driver and Support Assistant before 3.5.0.1 may allow an authenticated user to potentially execute code as administrator via local access.
6.7CVE-2018-12200intel corporationintel(r) csme, server platform services, trusted execution engine and intel(r) active management technology+1
EPSS score
0.35%
Insufficient access control in Intel(R) Capability Licensing Service before version 1.50.638.1 may allow an unprivileged user to potentially escalate privileges via local access.
8.2CVE-2018-12220intel corporationintel(r) graphics driver for windows+1
EPSS score
0.45%
Logic bug in Kernel Mode Driver in Intel(R) Graphics Driver for Windows* before versions before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x.5057 (aka 15.36.x.5057), 20.19.x.5063 (aka 15.40.x.5063) 21.20.x.5064 (aka 15.45.x.5064) and 24.20.100.6373 potentially enables a privileged user to execute arbitrary code via local access.
7.8CVE-2018-12177intel corporationintel(r) proset/wireless wifi software+1
EPSS score
0.28%
Improper directory permissions in the ZeroConfig service in Intel(R) PROSet/Wireless WiFi Software before version 20.90.0.7 may allow an authorized user to potentially enable escalation of privilege via local access.
5.5CVE-2018-12155intel corporationintel integrated performance primitives+1
EPSS score
0.33%
Data leakage in cryptographic libraries for Intel IPP before 2019 update1 release may allow an authenticated user to potentially enable information disclosure via local access.
7.5CVE-2018-12187intel corporationintel(r) csme, server platform services, trusted execution engine and intel(r) active management technology+1
EPSS score
1.11%
Insufficient input validation in Intel(R) Active Management Technology (Intel(R) AMT) before version 11.8.60, 11.11.60, 11.22.60 or 12.0.20 may allow an unauthenticated user to potentially cause a denial of service via network access.
7.6CVE-2018-12169intelcore_i3_firmware+31
EPSS score
0.55%
Platform sample code firmware in 4th Generation Intel Core Processor, 5th Generation Intel Core Processor, 6th Generation Intel Core Processor, 7th Generation Intel Core Processor and 8th Generation Intel Core Processor contains a logic error which may allow physical attacker to potentially bypass firmware authentication.
6.7CVE-2018-12190intel corporationintel(r) csme, server platform services, trusted execution engine and intel(r) active management technology+2
EPSS score
0.38%
Insufficient input validation in Intel(r) CSME subsystem before versions 11.8.60, 11.11.60, 11.22.60 or 12.0.20 or Intel(r) TXE before 3.1.60 or 4.0.10 may allow a privileged user to potentially enable an escalation of privilege via local access.
5.6CVE-2018-12126alpineintel-ucode+27
EPSS score
1.51%
Microarchitectural Store Buffer Data Sampling (MSBDS): Store buffers on some microprocessors utilizing speculative execution may allow an authenticated user to potentially enable information disclosure via a side channel with local access. A list of impacted products can be found here: https://www.intel.com/content/dam/www/public/us/en/documents/corporate-information/SA00233-microcode-update-guidance_05132019.pdf
4.6CVE-2018-12188intel corporationintel(r) csme, server platform services, trusted execution engine and intel(r) active management technology+2
EPSS score
0.34%
Insufficient input validation in Intel CSME before versions 11.8.60, 11.11.60, 11.22.60 or 12.0.20 or Intel TXE before version 3.1.60 or 4.0.10 may allow an unauthenticated user to potentially modify data via physical access.
7.6CVE-2018-12191intel corporationintel(r) csme, server platform services, trusted execution engine and intel(r) active management technology+3
EPSS score
0.48%
Bounds check in Kernel subsystem in Intel CSME before version 11.8.60, 11.11.60, 11.22.60 or 12.0.20, or Intel(R) Server Platform Services before versions 4.00.04.383 or SPS 4.01.02.174, or Intel(R) TXE before versions 3.1.60 or 4.0.10 may allow an unauthenticated user to potentially execute arbitrary code via physical access.
7.2CVE-2018-12201ubuntuintel-microcode+3
EPSS score
0.52%
Buffer overflow vulnerability in Platform Sample / Silicon Reference firmware for 8th Generation Intel(R) Core Processor, 7th Generation Intel(R) Core Processor, Intel(R) Pentium(R) Silver J5005 Processor, Intel(R) Pentium(R) Silver N5000 Processor, Intel(R) Celeron(R) J4105 Processor, Intel(R) Celeron(R) J4005 Processor, Intel Celeron(R) N4100 Processor and Intel(R) Celeron N4000 Processor may allow privileged user to potentially execute arbitrary code via local access.
6.5CVE-2018-12207alpinexen+806
EPSS score
0.92%
Improper invalidation for page table updates by a virtual guest operating system for multiple Intel(R) Processors may allow an authenticated user to potentially enable denial of service of the host system via local access.