Intel Corporation vulnerabilities, page 2
167 vulnerabilities
Known vulnerabilities in Intel Corporation products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 98 products.
CVE-2018-12162intel corporationintel(r) openvino(tm) toolkit for windows+1
EPSS score0.32%
Directory permissions in the Intel OpenVINO Toolkit for Windows before version 2018.1.265 may allow an authenticated user to potentially execute code using default directory permissions via local access.CVE-2018-12193intel corporationintel quickassit technology for linux+1EPSS score0.36%
Insufficient access control in driver stack for Intel QuickAssist Technology for Linux before version 4.2 may allow an unprivileged user to potentially disclose information via local access.CVE-2018-12163intel corporationintel iot developers kit+1EPSS score0.51%
A DLL injection vulnerability in the Intel IoT Developers Kit 4.0 installer may allow an authenticated user to potentially escalate privileges using file modification via local access.CVE-2018-12202ubuntuintel-microcode+3EPSS score0.39%
Privilege escalation vulnerability in Platform Sample/ Silicon Reference firmware for 8th Generation Intel(R) Core Processor, 7th Generation Intel(R) Core Processor may allow privileged user to potentially leverage existing features via local access.CVE-2018-12203ubuntuintel-microcode+3EPSS score0.45%
Denial of service vulnerability in Platform Sample/ Silicon Reference firmware for 8th Generation Intel Core Processor, 7th Generation Intel Core Processor may allow privileged user to potentially execute arbitrary code via local access.CVE-2018-12148intel corporationintel(r) driver & support assistant+1EPSS score0.35%
Privilege escalation in file permissions in Intel Driver and Support Assistant before 3.5.0.1 may allow an authenticated user to potentially execute code as administrator via local access.CVE-2018-12200intel corporationintel(r) csme, server platform services, trusted execution engine and intel(r) active management technology+1EPSS score0.35%
Insufficient access control in Intel(R) Capability Licensing Service before version 1.50.638.1 may allow an unprivileged user to potentially escalate privileges via local access.CVE-2018-12220intel corporationintel(r) graphics driver for windows+1EPSS score0.45%
Logic bug in Kernel Mode Driver in Intel(R) Graphics Driver for Windows* before versions before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x.5057 (aka 15.36.x.5057), 20.19.x.5063 (aka 15.40.x.5063) 21.20.x.5064 (aka 15.45.x.5064) and 24.20.100.6373 potentially enables a privileged user to execute arbitrary code via local access.CVE-2018-12177intel corporationintel(r) proset/wireless wifi software+1EPSS score0.28%
Improper directory permissions in the ZeroConfig service in Intel(R) PROSet/Wireless WiFi Software before version 20.90.0.7 may allow an authorized user to potentially enable escalation of privilege via local access.CVE-2018-12155intel corporationintel integrated performance primitives+1EPSS score0.33%
Data leakage in cryptographic libraries for Intel IPP before 2019 update1 release may allow an authenticated user to potentially enable information disclosure via local access.CVE-2018-12187intel corporationintel(r) csme, server platform services, trusted execution engine and intel(r) active management technology+1EPSS score1.11%
Insufficient input validation in Intel(R) Active Management Technology (Intel(R) AMT) before version 11.8.60, 11.11.60, 11.22.60 or 12.0.20 may allow an unauthenticated user to potentially cause a denial of service via network access.CVE-2018-12190intel corporationintel(r) csme, server platform services, trusted execution engine and intel(r) active management technology+2EPSS score0.38%
Insufficient input validation in Intel(r) CSME subsystem before versions 11.8.60, 11.11.60, 11.22.60 or 12.0.20 or Intel(r) TXE before 3.1.60 or 4.0.10 may allow a privileged user to potentially enable an escalation of privilege via local access.CVE-2018-12126alpineintel-ucode+27EPSS score1.51%
Microarchitectural Store Buffer Data Sampling (MSBDS): Store buffers on some microprocessors utilizing speculative execution may allow an authenticated user to potentially enable information disclosure via a side channel with local access. A list of impacted products can be found here: https://www.intel.com/content/dam/www/public/us/en/documents/corporate-information/SA00233-microcode-update-guidance_05132019.pdfCVE-2018-12188intel corporationintel(r) csme, server platform services, trusted execution engine and intel(r) active management technology+2EPSS score0.34%
Insufficient input validation in Intel CSME before versions 11.8.60, 11.11.60, 11.22.60 or 12.0.20 or Intel TXE before version 3.1.60 or 4.0.10 may allow an unauthenticated user to potentially modify data via physical access.CVE-2018-12191intel corporationintel(r) csme, server platform services, trusted execution engine and intel(r) active management technology+3EPSS score0.48%
Bounds check in Kernel subsystem in Intel CSME before version 11.8.60, 11.11.60, 11.22.60 or 12.0.20, or Intel(R) Server Platform Services before versions 4.00.04.383 or SPS 4.01.02.174, or Intel(R) TXE before versions 3.1.60 or 4.0.10 may allow an unauthenticated user to potentially execute arbitrary code via physical access.CVE-2018-12201ubuntuintel-microcode+3EPSS score0.52%
Buffer overflow vulnerability in Platform Sample / Silicon Reference firmware for 8th Generation Intel(R) Core Processor, 7th Generation Intel(R) Core Processor, Intel(R) Pentium(R) Silver J5005 Processor, Intel(R) Pentium(R) Silver N5000 Processor, Intel(R) Celeron(R) J4105 Processor, Intel(R) Celeron(R) J4005 Processor, Intel Celeron(R) N4100 Processor and Intel(R) Celeron N4000 Processor may allow privileged user to potentially execute arbitrary code via local access.CVE-2018-12198intel corporationintel(r) csme, server platform services, trusted execution engine and intel(r) active management technology+1EPSS score0.34%
Insufficient input validation in Intel(R) Server Platform Services HECI subsystem before version SPS_E5_04.00.04.393.0 may allow privileged user to potentially cause a denial of service via local access.CVE-2018-12210intel corporationintel(r) graphics driver for windows+1EPSS score0.32%
Multiple pointer dereferences in User Mode Driver in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x.5057 (aka 15.36.x.5057), 20.19.x.5063 (aka 15.40.x.5063) 21.20.x.5064 (aka 15.45.x.5064) and 24.20.100.6373 potentially enables an unprivileged user to cause a denial of service via local access.CVE-2018-12149intel corporationintel(r) extreme tuning utility+1EPSS score0.28%
Buffer overflow in input handling in Intel Extreme Tuning Utility before 6.4.1.21 may allow an authenticated user to potentially deny service to the application via local access.CVE-2018-12208intel corporationintel(r) csme, server platform services, trusted execution engine and intel(r) active management technology+3EPSS score0.51%
Buffer overflow in HECI subsystem in Intel(R) CSME before versions 11.8.60, 11.11.60, 11.22.60 or 12.0.20 and Intel(R) TXE version before 3.1.60 or 4.0.10, or Intel(R) Server Platform Services before version 5.00.04.012 may allow an unauthenticated user to potentially execute arbitrary code via physical access.