Intel Corporation vulnerabilities, page 4

167 vulnerabilities

Known vulnerabilities in Intel Corporation products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 98 products.

5.5CVE-2018-12219intel corporationintel(r) graphics driver for windows+1
EPSS score
0.36%
Insufficient input validation in Kernel Mode Driver in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x.5057 (aka 15.36.x.5057), 20.19.x.5063 (aka 15.40.x.5063) 21.20.x.5064 (aka 15.45.x.5064) and 24.20.100.6373 potentially enables an unprivileged user to read memory via local access via local access.
9.8CVE-2018-12171intel corporationintel(r) baseboard management controller (bmc) firmware+1
EPSS score
2.14%
Privilege escalation in Intel Baseboard Management Controller (BMC) firmware before version 1.43.91f76955 may allow an unprivileged user to potentially execute arbitrary code or perform denial of service over the network.
3.3CVE-2018-12218intel corporationintel(r) graphics driver for windows+1
EPSS score
0.31%
Unhandled exception in User Mode Driver in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x.5057 (aka 15.36.x.5057), 20.19.x.5063 (aka 15.40.x.5063) 21.20.x.5064 (aka 15.45.x.5064) and 24.20.100.6373 potentially enables an unprivileged user to cause a memory leak via local access.
6CVE-2018-12213intel corporationintel(r) graphics driver for windows+1
EPSS score
0.32%
Potential memory corruption in Kernel Mode Driver in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x.5057 (aka 15.36.x.5057), 20.19.x.5063 (aka 15.40.x.5063) 21.20.x.5064 (aka 15.45.x.5064) and 24.20.100.6373 potentially enables an unprivileged user to cause a denial of service via local access.
2.3CVE-2018-12217intel corporationintel(r) graphics driver for windows+1
EPSS score
0.35%
Insufficient access control in Kernel Mode Driver in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x.5057 (aka 15.36.x.5057), 20.19.x.5063 (aka 15.40.x.5063) 21.20.x.5064 (aka 15.45.x.5064) and 24.20.100.6373 potentially enables a privileged user to read device configuration information via local access.
4.4CVE-2018-12189intel corporationintel(r) csme, server platform services, trusted execution engine and intel(r) active management technology+2
EPSS score
0.29%
Unhandled exception in Content Protection subsystem in Intel CSME before versions 11.8.60, 11.11.60, 11.22.60 or 12.0.20 or Intel TXE before 3.1.60 or 4.0.10 may allow privileged user to potentially modify data via local access.
8.2CVE-2018-12214intel corporationintel(r) graphics driver for windows+1
EPSS score
0.43%
Potential memory corruption in Kernel Mode Driver in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x.5057 (aka 15.36.x.5057), 20.19.x.5063 (aka 15.40.x.5063) 21.20.x.5064 (aka 15.45.x.5064) and 24.20.100.6373 potentially enables a privileged user to execute arbitrary code via local access.
5.5CVE-2018-12154intel corporationintel graphics driver+1
EPSS score
0.48%
Denial of Service in Unified Shader Compiler in Intel Graphics Drivers before 10.18.x.5056 (aka 15.33.x.5056), 10.18.x.5057 (aka 15.36.x.5057) and 20.19.x.5058 (aka 15.40.x.5058) may allow an unprivileged user to potentially create an infinite loop and crash an application via local access.
8.2CVE-2018-12216intel corporationintel(r) graphics driver for windows+1
EPSS score
0.46%
Insufficient input validation in Kernel Mode Driver in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x.5057 (aka 15.36.x.5057), 20.19.x.5063 (aka 15.40.x.5063) 21.20.x.5064 (aka 15.45.x.5064) and 24.20.100.6373 potentially enables a privileged user to execute arbitrary code via local access via local access.
5.5CVE-2018-12172intel corporationintel server board+4
EPSS score
0.31%
Improper password hashing in firmware in Intel Server Board (S7200AP,S7200APR) and Intel Compute Module (HNS7200AP, HNS7200AP) may allow a privileged user to potentially disclose firmware passwords via local access.
7.2CVE-2018-3657intel corporationintel(r) active management technology+14
EPSS score
0.59%
Multiple buffer overflows in Intel AMT in Intel CSME firmware versions before version 12.0.5 may allow a privileged user to potentially execute arbitrary code with Intel AMT execution privilege via local access.
6.8CVE-2018-3659intel corporationintel(r) platform trust technology (ptt)+2
EPSS score
0.43%
A vulnerability in Intel PTT module in Intel CSME firmware before version 12.0.5 and Intel TXE firmware before version 4.0 may allow an unauthenticated user to potentially disclose information via physical access.
5.5CVE-2018-3661intel corporationsystem configuration utilities+2
EPSS score
0.31%
Buffer overflow in Intel system Configuration utilities selview.exe and syscfg.exe before version 14 build 11 allows a local user to crash these services potentially resulting in a denial of service.
8CVE-2018-3662intel corporationsaffron memorybase+1
EPSS score
0.65%
Escalation of privilege in Intel Saffron MemoryBase before version 11.4 potentially allows an authorized user of the Saffron application to execute arbitrary code as root.
8.8CVE-2018-3670intel corporationsmart sound technology+1
EPSS score
0.39%
Driver module in Intel Smart Sound Technology before version 9.21.00.3541 potentially allows a local attacker to execute arbitrary code as administrator via a buffer overflow.
7.8CVE-2018-3669intel corporationintel(r) centrino(r) wireless-n and intel(r) centrino(r) advanced-n products bluetooth+1
EPSS score
1.12%
A STOP error (BSoD) in the ibtfltcoex.sys driver for Intel Centrino Wireless N and Intel Centrino Advanced N adapters may allow an unauthenticated user to potentially send a malformed L2CAP Connection Request is sent to the Intel Bluetooth device via the network.
7.8CVE-2018-3698intel corporationintel ready mode technology
EPSS score
0.35%
Improper file permissions in the installer for the Intel Ready Mode Technology may allow an unprivileged user to potentially gain privileged access via local access.
5.6CVE-2018-3665alpinexen+186
EPSS score
0.63%
System software utilizing Lazy FP state restore technique on systems using Intel Core-based microprocessors may potentially allow a local process to infer data from another process through a speculative execution side channel.
5.6CVE-2018-3620alpinexen+27
EPSS score
5.58%
Systems with microprocessors utilizing speculative execution and address translations may allow unauthorized disclosure of information residing in the L1 data cache to an attacker with local user access via a terminal page fault and a side-channel analysis.
4.7CVE-2018-3691intel corporationintegrated performance primitives cryptography library+1
EPSS score
0.29%
Some implementations in Intel Integrated Performance Primitives Cryptography Library before version 2018 U3.1 do not properly ensure constant execution time.