Intel Corporation vulnerabilities, page 5
167 vulnerabilities
Known vulnerabilities in Intel Corporation products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 98 products.
CVE-2018-3652intel corporationintel xeon processor+34
EPSS score0.37%
Existing UEFI setting restrictions for DCI (Direct Connect Interface) in 5th and 6th generation Intel Xeon Processor E3 Family, Intel Xeon Scalable processors, and Intel Xeon Processor D Family allows a limited physical presence attacker to potentially access platform secrets via debug interfaces.CVE-2018-3667intel corporationintel processor diagnostic tool+1EPSS score0.37%
Installation tool IPDT (Intel Processor Diagnostic Tool) 4.1.0.24 sets permissions of installed files incorrectly, allowing for execution of arbitrary code and potential privilege escalation.CVE-2018-3672intel corporationsmart sound technology+1EPSS score0.38%
Driver module in Intel Smart Sound Technology before version 9.21.00.3541 potentially allows a local attacker to execute arbitrary code as administrator via a system calls.CVE-2018-3645intel corporationintel remote keyboard+1EPSS score0.29%
Escalation of privilege in all versions of the Intel Remote Keyboard allows a local attacker to inject keystrokes into another remote keyboard session.CVE-2018-3624intel corporationintel xmm71xx, intel xmm72xx, intel xmm73xx, intel xmm74xx, sofia 3g, sofia 3g-r, and sofia 3g-rw+1EPSS score1.30%
Buffer overflow in ETWS processing module Intel XMM71xx, XMM72xx, XMM73xx, XMM74xx and Sofia 3G/R allows remote attacker to potentially execute arbitrary code via an adjacent network.CVE-2018-3629intel corporationintel active management technology+1EPSS score0.98%
Buffer overflow in event handler in Intel Active Management Technology in Intel Converged Security Manageability Engine Firmware 3.x, 4.x, 5.x, 6.x, 7.x, 8.x, 9.x, 10.x, and 11.x may allow an attacker to cause a denial of service via the same subnet.CVE-2018-3687intel corporationintel quartus ii programmer and tools+1EPSS score0.35%
Unquoted service paths in Intel Quartus II Programmer and Tools in versions 11.0 - 15.0 allow a local attacker to potentially execute arbitrary code.CVE-2018-3635intel corporationintel rapid store technology+1EPSS score0.38%
Insufficient input validation in installer in Intel Rapid Store Technology (RST) before version 16.7 may allow an unprivileged user to potentially elevate privileges or cause an installer denial of service via local access.CVE-2018-3649intel corporationdual band wireless-ac, tri-band wireless-ac and wireless-ac family of products+18EPSS score0.54%
DLL injection vulnerability in the installation executables (Autorun.exe and Setup.exe) for Intel's wireless drivers and related software in Intel Dual Band Wireless-AC, Tri-Band Wireless-AC and Wireless-AC family of products allows a local attacker to cause escalation of privilege via remote code execution.CVE-2018-3646alpinexen+51EPSS score8.57%
Systems with microprocessors utilizing speculative execution and address translations may allow unauthorized disclosure of information residing in the L1 data cache to an attacker with local user access with guest OS privilege via a terminal page fault and a side-channel analysis.CVE-2018-3663intel corporationsaffron memorybase+1EPSS score0.40%
Escalation of privilege in Intel Saffron MemoryBase before 11.4 allows an authenticated user access to privileged information.CVE-2018-3696intel corporationintel raid web console v3 for windows+1EPSS score0.36%
Authentication bypass in the Intel RAID Web Console 3 for Windows before 4.186 may allow an unprivileged user to potentially gain administrative privileges via local access.CVE-2018-3632intel corporationintel active management technology+1EPSS score0.39%
Memory corruption in Intel Active Management Technology in Intel Converged Security Manageability Engine Firmware 6.x / 7.x / 8.x / 9.x / 10.x / 11.0 / 11.5 / 11.6 / 11.7 / 11.10 / 11.20 could be triggered by an attacker with local administrator permission on the system.CVE-2018-3697intel corporationintel media server studio+1EPSS score0.30%
Improper directory permissions in the installer for the Intel Media Server Studio may allow unprivileged users to potentially enable an escalation of privilege via local access.CVE-2018-3650intel corporationintel distribution for python+1EPSS score0.32%
Insufficient Input Validation in Bleach module in INTEL Distribution for Python versions prior to IDP 2018 Update 2 allows unprivileged user to bypass URI sanitization via local vector.CVE-2018-3616intel corporationintel(r) active management technology+14EPSS score2.39%
Bleichenbacher-style side channel vulnerability in TLS implementation in Intel Active Management Technology before 12.0.5 may allow an unauthenticated user to potentially obtain the TLS session key via the network.CVE-2018-3686intel corporationintel-sa-00086 detection tool+1EPSS score0.45%
Code injection vulnerability in INTEL-SA-00086 Detection Tool before version 1.2.7.0 may allow a privileged user to potentially execute arbitrary code via local access.CVE-2018-3641intel corporationintel remote keyboard+1EPSS score1.11%
Escalation of privilege in all versions of the Intel Remote Keyboard allows a network attacker to inject keystrokes as a local user.CVE-2018-3704intel corporationintel parallel studio+2EPSS score0.28%
Improper directory permissions in the installer for the Intel Parallel Studio before 2019 Gold may allow authenticated users to potentially enable an escalation of privilege via local access.CVE-2018-3626intel corporationsgx sdk+1EPSS score0.28%
Edger8r tool in the Intel SGX SDK before version 2.1.2 (Linux) and 1.9.6 (Windows) may generate code that is susceptible to a side channel potentially allowing a local user to access unauthorized information.