Intel Corporation vulnerabilities

167 vulnerabilities

Known vulnerabilities in Intel Corporation products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 98 products.

Products

50 of 98
7.3CVE-2018-18098intel corporationintel(r) sgx sdk and platform software for windows+2
EPSS score
0.28%
Improper file verification in install routine for Intel(R) SGX SDK and Platform Software for Windows before 2.2.100 may allow an escalation of privilege via local access.
6.5CVE-2018-18091intel corporationintel(r) graphics driver for windows+1
EPSS score
0.32%
Use after free in Kernel Mode Driver in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x.5057 (aka 15.36.x.5057), 20.19.x.5063 (aka 15.40.x.5063) 21.20.x.5064 (aka 15.45.x.5064) and 24.20.100.6373 may allow an unprivileged user to potentially enable a denial of service via local access.
7.8CVE-2018-18097intel corporationintel solid state drive toolbox+1
EPSS score
0.28%
Improper directory permissions in Intel Solid State Drive Toolbox before 3.5.7 may allow an authenticated user to potentially enable escalation of privilege via local access.
5.5CVE-2018-18090intel corporationintel(r) graphics driver for windows+1
EPSS score
0.32%
Out of bounds read in igdkm64.sys in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x.5057 (aka 15.36.x.5057), 20.19.x.5063 (aka 15.40.x.5063) 21.20.x.5064 (aka 15.45.x.5064) and 24.20.100.6373 may allow an authenticated user to potentially enable denial of service via local access.
6.8CVE-2018-18095intel corporationintel(r) ssd dc s4500/s4600 series+2
EPSS score
0.52%
Improper authentication in firmware for Intel(R) SSD DC S4500 Series and Intel(R) SSD DC S4600 Series before SCV10150 may allow an unprivileged user to potentially enable escalation of privilege via physical access.
5.5CVE-2018-18096intel corporationintel quickassist technology for linux
EPSS score
0.28%
Improper memory handling in Intel QuickAssist Technology for Linux (all versions) may allow an authenticated user to potentially enable a denial of service via local access.
7.8CVE-2018-18093intel corporationintel vtune amplifier+1
EPSS score
0.28%
Improper file permissions in the installer for Intel VTune Amplifier 2018 Update 3 and before may allow unprivileged user to potentially gain privileged access via local access.
5.5CVE-2018-18089intel corporationintel(r) graphics driver for windows+1
EPSS score
0.33%
Multiple out of bounds read in igdkm64.sys in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x.5057 (aka 15.36.x.5057), 20.19.x.5063 (aka 15.40.x.5063) 21.20.x.5064 (aka 15.45.x.5064) and 24.20.100.6373 may allow an authenticated user to potentially enable information disclosure via local access.
4.4CVE-2018-12167intel corporationintel(r) optane(tm) ssd dc p4800x+1
EPSS score
0.29%
Firmware update routine in bootloader for Intel(R) Optane(TM) SSD DC P4800X before version E2010435 may allow a privileged user to potentially enable a denial of service via local access.
7.8CVE-2018-12131intel corporationintel nvme and intel rste+3
EPSS score
0.28%
Permissions in the driver pack installers for Intel NVMe before version 4.0.0.1007 and Intel RSTe before version 4.7.0.2083 may allow an authenticated user to potentially escalate privilege via local access.
7.8CVE-2018-12221intel corporationintel(r) graphics driver for windows+1
EPSS score
0.36%
Insufficient input validation in Kernel Mode Driver in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x.5057 (aka 15.36.x.5057), 20.19.x.5063 (aka 15.40.x.5063) 21.20.x.5064 (aka 15.45.x.5064) and 24.20.100.6373 potentially enables an unprivileged user to cause an integer overflow via local access.
7.6CVE-2018-12173intel corporationintel server boards firmware+14
EPSS score
0.41%
Insufficient access protection in firmware in Intel Server Board, Intel Server System and Intel Compute Module before firmware version 00.01.0014 may allow an unauthenticated attacker to potentially execute arbitrary code resulting in information disclosure, escalation of privilege and/or denial of service via local access.
4.4CVE-2018-12166intel corporationintel(r) optane(tm) ssd dc p4800x+1
EPSS score
0.29%
Insufficient write protection in firmware for Intel(R) Optane(TM) SSD DC P4800X before version E2010435 may allow a privileged user to potentially enable a denial of service via local access.
6CVE-2018-12158intel corporationintel nuc firmware kits+1
EPSS score
0.33%
Insufficient input validation in BIOS update utility in Intel NUC FW kits downloaded before May 24, 2018 may allow a privileged user to potentially trigger a denial of service or information disclosure via local access.
5.6CVE-2018-12127alpinexen+26
EPSS score
1.51%
Microarchitectural Load Port Data Sampling (MLPDS): Load ports on some microprocessors utilizing speculative execution may allow an authenticated user to potentially enable information disclosure via a side channel with local access. A list of impacted products can be found here: https://www.intel.com/content/dam/www/public/us/en/documents/corporate-information/SA00233-microcode-update-guidance_05132019.pdf
6.7CVE-2018-12196intel corporationintel(r) csme, server platform services, trusted execution engine and intel(r) active management technology+1
EPSS score
0.42%
Insufficient input validation in Intel(R) AMT in Intel(R) CSME before version 11.8.60, 11.11.60, 11.22.60 or 12.0.20 may allow a privileged user to potentially execute arbitrary code via local access.
3.3CVE-2018-12222intel corporationintel(r) graphics driver for windows+1
EPSS score
0.34%
Insufficient input validation in Kernel Mode Driver in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x.5057 (aka 15.36.x.5057), 20.19.x.5063 (aka 15.40.x.5063) 21.20.x.5064 (aka 15.45.x.5064) and 24.20.100.6373 potentially enables an unprivileged user to cause an out of bound memory read via local access.
6.5CVE-2018-12211intel corporationintel(r) graphics driver for windows+1
EPSS score
0.33%
Insufficient input validation in User Mode Driver in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x.5057 (aka 15.36.x.5057), 20.19.x.5063 (aka 15.40.x.5063) 21.20.x.5064 (aka 15.45.x.5064) and 24.20.100.6373 potentially enables an unprivileged user to cause a denial of service via local access.
5.5CVE-2018-12206intel corporationintel quickassist technology for linux+1
EPSS score
0.28%
Improper configuration of hardware access in Intel QuickAssist Technology for Linux (all versions) may allow an authenticated user to potentially enable a denial of service via local access.
8.2CVE-2018-12176intel corporationintel(r) nuc kits and intel(r) compute cards+3
EPSS score
0.41%
Improper input validation in firmware for Intel NUC Kits may allow a privileged user to potentially execute arbitrary code resulting in information disclosure, escalation of privilege and/or denial of service via local access.