Intel vulnerabilities, page 3

1,779 vulnerabilities

Known vulnerabilities in Intel products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 5,184 products.

6CVE-2018-12198intel corporationintel(r) csme, server platform services, trusted execution engine and intel(r) active management technology+1
EPSS score
0.34%
Insufficient input validation in Intel(R) Server Platform Services HECI subsystem before version SPS_E5_04.00.04.393.0 may allow privileged user to potentially cause a denial of service via local access.6.5CVE-2018-12210intel corporationintel(r) graphics driver for windows+1
EPSS score
0.32%
Multiple pointer dereferences in User Mode Driver in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x.5057 (aka 15.36.x.5057), 20.19.x.5063 (aka 15.40.x.5063) 21.20.x.5064 (aka 15.45.x.5064) and 24.20.100.6373 potentially enables an unprivileged user to cause a denial of service via local access.5.5CVE-2018-12149intel corporationintel(r) extreme tuning utility+1
EPSS score
0.28%
Buffer overflow in input handling in Intel Extreme Tuning Utility before 6.4.1.21 may allow an authenticated user to potentially deny service to the application via local access.7.6CVE-2018-12208intel corporationintel(r) csme, server platform services, trusted execution engine and intel(r) active management technology+3
EPSS score
0.51%
Buffer overflow in HECI subsystem in Intel(R) CSME before versions 11.8.60, 11.11.60, 11.22.60 or 12.0.20 and Intel(R) TXE version before 3.1.60 or 4.0.10, or Intel(R) Server Platform Services before version 5.00.04.012 may allow an unauthenticated user to potentially execute arbitrary code via physical access.5.9CVE-2018-12130alpinexen+26
EPSS score
1.57%
Microarchitectural Fill Buffer Data Sampling (MFBDS): Fill buffers on some microprocessors utilizing speculative execution may allow an authenticated user to potentially enable information disclosure via a side channel with local access. A list of impacted products can be found here: https://www.intel.com/content/dam/www/public/us/en/documents/corporate-information/SA00233-microcode-update-guidance_05132019.pdf7.2CVE-2018-12204ubuntuintel-microcode+3
EPSS score
0.40%
Improper memory initialization in Platform Sample/Silicon Reference firmware Intel(R) Server Board, Intel(R) Server System and Intel(R) Compute Module may allow privileged user to potentially enable an escalation of privilege via local access.7.8CVE-2018-12168intel corporationintel(r) computing improvement program+1
EPSS score
0.35%
Privilege escalation in file permissions in Intel Computing Improvement Program before version 2.2.0.03942 may allow an authenticated user to potentially execute code as administrator via local access.6.7CVE-2018-12150intel corporationintel(r) extreme tuning utility+1
EPSS score
0.38%
Escalation of privilege in Installer for Intel Extreme Tuning Utility before 6.4.1.21 may allow an authenticated user to potentially execute code or disclose information as administrator via local access.6.8CVE-2018-12185intel corporationintel(r) csme, server platform services, trusted execution engine and intel(r) active management technology+1
EPSS score
0.40%
Insufficient input validation in Intel(R) AMT in Intel(R) CSME before version 11.8.60, 11.11.60, 11.22.60 or 12.0.20 may allow an unauthenticated user to potentially execute arbitrary code via physical access.6CVE-2018-12215intel corporationintel(r) graphics driver for windows+1
EPSS score
0.34%
Insufficient input validation in Kernel Mode Driver in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x.5057 (aka 15.36.x.5057), 20.19.x.5063 (aka 15.40.x.5063) 21.20.x.5064 (aka 15.45.x.5064) and 24.20.100.6373 potentially enables a privileged user to cause a denial of service via local access.7.2CVE-2018-12192intel corporationintel(r) csme, server platform services, trusted execution engine and intel(r) active management technology+2
EPSS score
0.47%
Logic bug in Kernel subsystem in Intel CSME before version 11.8.60, 11.11.60, 11.22.60 or 12.0.20, or Intel(R) Server Platform Services before version SPS_E5_04.00.04.393.0 may allow an unauthenticated user to potentially bypass MEBx authentication via physical access.3.3CVE-2018-12224intel corporationintel(r) graphics driver for windows+1
EPSS score
0.34%
Buffer leakage in igdkm64.sys in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x.5057 (aka 15.36.x.5057), 20.19.x.5063 (aka 15.40.x.5063) 21.20.x.5064 (aka 15.45.x.5064) and 24.20.100.6373 may allow an authenticated user to potentially enable information disclosure via local access.3.3CVE-2018-12209intel corporationintel(r) graphics driver for windows+1
EPSS score
0.32%
Insufficient access control in User Mode Driver in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x.5057 (aka 15.36.x.5057), 20.19.x.5063 (aka 15.40.x.5063) 21.20.x.5064 (aka 15.45.x.5064) and 24.20.100.6373 potentially enables an unprivileged user to read device configuration information via local access.6.5CVE-2018-12212intel corporationintel(r) graphics driver for windows+1
EPSS score
0.35%
Buffer overflow in User Mode Driver in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x.5057 (aka 15.36.x.5057), 20.19.x.5063 (aka 15.40.x.5063) 21.20.x.5064 (aka 15.45.x.5064) and 24.20.100.6373 potentially enables an unprivileged user to cause a denial of service via local access.6.5CVE-2018-12161intel corporationintel raid web server 3+1
EPSS score
1.07%
Insufficient session validation in the webserver component of the Intel Rapid Web Server 3 may allow an unauthenticated user to potentially disclose information via network access.7.2CVE-2018-12205ubuntuintel-microcode+3
EPSS score
0.28%
Improper certificate validation in Platform Sample/ Silicon Reference firmware for 8th Generation Intel(R) Core(tm) Processor, 7th Generation Intel(R) Core(tm) Processor may allow an unauthenticated user to potentially enable an escalation of privilege via physical access.7.8CVE-2018-12175intel corporationintel(r) distribution for python 2018+1
EPSS score
0.28%
Default install directory permissions in Intel Distribution for Python (IDP) version 2018 may allow an unprivileged user to escalate privileges via local access.7.8CVE-2018-12174intel corporationintel parallel studio xe 2018+1
EPSS score
0.38%
Heap overflow in Intel Trace Analyzer 2018 in Intel Parallel Studio XE 2018 Update 3 may allow an authenticated user to potentially escalate privileges via local access.6.3CVE-2018-12223intel corporationintel(r) graphics driver for windows+1
EPSS score
0.29%
Insufficient access control in User Mode Driver in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x.5057 (aka 15.36.x.5057), 20.19.x.5063 (aka 15.40.x.5063) 21.20.x.5064 (aka 15.45.x.5064) and 24.20.100.6373 potentially enables an unprivileged user to escape from a virtual machine guest-to-host via local access.7.8CVE-2018-12152intel corporationintel graphics driver+1
EPSS score
0.87%
Pointer corruption in Unified Shader Compiler in Intel Graphics Drivers before 10.18.x.5056 (aka 15.33.x.5056), 10.18.x.5057 (aka 15.36.x.5057) and 20.19.x.5058 (aka 15.40.x.5058) may allow an unauthenticated remote user to potentially execute arbitrary WebGL code via local access.