Intel vulnerabilities, page 5
1,779 vulnerabilities
Known vulnerabilities in Intel products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 5,184 products.
CVE-2018-3662intel corporationsaffron memorybase+1
EPSS score0.65%
Escalation of privilege in Intel Saffron MemoryBase before version 11.4 potentially allows an authorized user of the Saffron application to execute arbitrary code as root.CVE-2018-3670intel corporationsmart sound technology+1EPSS score0.39%
Driver module in Intel Smart Sound Technology before version 9.21.00.3541 potentially allows a local attacker to execute arbitrary code as administrator via a buffer overflow.CVE-2018-3669intel corporationintel(r) centrino(r) wireless-n and intel(r) centrino(r) advanced-n products bluetooth+1EPSS score1.12%
A STOP error (BSoD) in the ibtfltcoex.sys driver for Intel Centrino Wireless N and Intel Centrino Advanced N adapters may allow an unauthenticated user to potentially send a malformed L2CAP Connection Request is sent to the Intel Bluetooth device via the network.CVE-2018-3665alpinexen+186EPSS score0.63%
System software utilizing Lazy FP state restore technique on systems using Intel Core-based microprocessors may potentially allow a local process to infer data from another process through a speculative execution side channel.CVE-2018-3620alpinexen+27EPSS score5.58%
Systems with microprocessors utilizing speculative execution and address translations may allow unauthorized disclosure of information residing in the L1 data cache to an attacker with local user access via a terminal page fault and a side-channel analysis.CVE-2018-3691intel corporationintegrated performance primitives cryptography library+1EPSS score0.29%
Some implementations in Intel Integrated Performance Primitives Cryptography Library before version 2018 U3.1 do not properly ensure constant execution time.CVE-2018-3652intel corporationintel xeon processor+34EPSS score0.37%
Existing UEFI setting restrictions for DCI (Direct Connect Interface) in 5th and 6th generation Intel Xeon Processor E3 Family, Intel Xeon Scalable processors, and Intel Xeon Processor D Family allows a limited physical presence attacker to potentially access platform secrets via debug interfaces.CVE-2018-3667intel corporationintel processor diagnostic tool+1EPSS score0.37%
Installation tool IPDT (Intel Processor Diagnostic Tool) 4.1.0.24 sets permissions of installed files incorrectly, allowing for execution of arbitrary code and potential privilege escalation.CVE-2018-3672intel corporationsmart sound technology+1EPSS score0.38%
Driver module in Intel Smart Sound Technology before version 9.21.00.3541 potentially allows a local attacker to execute arbitrary code as administrator via a system calls.CVE-2018-3645intel corporationintel remote keyboard+1EPSS score0.29%
Escalation of privilege in all versions of the Intel Remote Keyboard allows a local attacker to inject keystrokes into another remote keyboard session.CVE-2018-3624intel corporationintel xmm71xx, intel xmm72xx, intel xmm73xx, intel xmm74xx, sofia 3g, sofia 3g-r, and sofia 3g-rw+1EPSS score1.30%
Buffer overflow in ETWS processing module Intel XMM71xx, XMM72xx, XMM73xx, XMM74xx and Sofia 3G/R allows remote attacker to potentially execute arbitrary code via an adjacent network.CVE-2018-3629intel corporationintel active management technology+1EPSS score0.98%
Buffer overflow in event handler in Intel Active Management Technology in Intel Converged Security Manageability Engine Firmware 3.x, 4.x, 5.x, 6.x, 7.x, 8.x, 9.x, 10.x, and 11.x may allow an attacker to cause a denial of service via the same subnet.CVE-2018-3687intel corporationintel quartus ii programmer and tools+1EPSS score0.35%
Unquoted service paths in Intel Quartus II Programmer and Tools in versions 11.0 - 15.0 allow a local attacker to potentially execute arbitrary code.CVE-2018-3701intelproset\/wireless_wifiEPSS score0.34%
Improper directory permissions in the installer for Intel(R) PROSet/Wireless WiFi Software version 20.100 and earlier may allow an authenticated user to potentially enable escalation of privilege via local access.CVE-2018-3635intel corporationintel rapid store technology+1EPSS score0.38%
Insufficient input validation in installer in Intel Rapid Store Technology (RST) before version 16.7 may allow an unprivileged user to potentially elevate privileges or cause an installer denial of service via local access.CVE-2018-3649intel corporationdual band wireless-ac, tri-band wireless-ac and wireless-ac family of products+18EPSS score0.54%
DLL injection vulnerability in the installation executables (Autorun.exe and Setup.exe) for Intel's wireless drivers and related software in Intel Dual Band Wireless-AC, Tri-Band Wireless-AC and Wireless-AC family of products allows a local attacker to cause escalation of privilege via remote code execution.CVE-2018-3646alpinexen+51EPSS score8.57%
Systems with microprocessors utilizing speculative execution and address translations may allow unauthorized disclosure of information residing in the L1 data cache to an attacker with local user access with guest OS privilege via a terminal page fault and a side-channel analysis.CVE-2018-3663intel corporationsaffron memorybase+1EPSS score0.40%
Escalation of privilege in Intel Saffron MemoryBase before 11.4 allows an authenticated user access to privileged information.CVE-2018-3696intel corporationintel raid web console v3 for windows+1EPSS score0.36%
Authentication bypass in the Intel RAID Web Console 3 for Windows before 4.186 may allow an unprivileged user to potentially gain administrative privileges via local access.CVE-2018-3632intel corporationintel active management technology+1EPSS score0.39%
Memory corruption in Intel Active Management Technology in Intel Converged Security Manageability Engine Firmware 6.x / 7.x / 8.x / 9.x / 10.x / 11.0 / 11.5 / 11.6 / 11.7 / 11.10 / 11.20 could be triggered by an attacker with local administrator permission on the system.