Overview 1,790 matches · 2 in Waratek scope · 2 protected · 8 exploited · 4 CISA KEV · 24 public PoC · 8 EPSS ≥ 0.5
1,790matches
2in Waratek scope0.1%
2protected0.1%
8exploited0.4%
4CISA KEV0.2%
24public PoC1.3%
8EPSS ≥ 0.50.4%
Protected by Waratek
2
0.1%
Rule in development
0
0.0%
Mitigation candidate
0
0.0%
No exploit published
0
0.0%
Outside Waratek scope
61
3.4%
Not applicable
1,727
96.5%
Withdrawn CVE
0
0.0%
blocked by ARMR today
2
0.1%
partly blocked
0
0.0%
not blocked
1,788
99.9%
not established
0
0.0%
unrecorded
0
0.0%
split by
peak 347 / year
19993
Not applicable3
High1
Medium1
Low1
not blocked3
Working exploit published1
No public exploit2
20006
Not applicable6
High2
Medium4
not blocked6
Working exploit published4
No public exploit2
20012
Not applicable2
High1
Low1
not blocked2
No public exploit2
20022
Not applicable2
Medium1
Low1
not blocked2
No public exploit2
20031
Not applicable1
Medium1
not blocked1
No public exploit1
20041
Not applicable1
Medium1
not blocked1
No public exploit1
20051
Not applicable1
High1
not blocked1
No public exploit1
20066
Not applicable6
High2
Medium4
not blocked6
Working exploit published2
No public exploit4
20075
Not applicable5
High2
Medium2
Low1
not blocked5
Working exploit published1
No public exploit4
20083
Not applicable3
High2
Low1
not blocked3
No public exploit3
20094
Not applicable4
High3
Medium1
not blocked4
No public exploit4
20102
Not applicable2
Medium2
not blocked2
No public exploit2
20111
Not applicable1
High1
not blocked1
No public exploit1
20122
Not applicable2
High1
Medium1
not blocked2
No public exploit2
20137
Not applicable7
High2
Medium2
Low3
not blocked7
Exploited1
No public exploit6
20143
Not applicable3
Medium3
not blocked3
Working exploit published1
No public exploit2
20150
20169
Not applicable9
High6
Medium3
not blocked9
No public exploit9
201736
Outside Waratek scope1
Not applicable35
Critical5
High21
Medium7
Low3
not blocked36
Exploited2
Working exploit published1
Proof of concept only1
No public exploit32
201899
Outside Waratek scope4
Not applicable95
Critical3
High45
Medium51
not blocked99
Exploited2
Working exploit published1
Proof of concept only2
No public exploit94
2019236
Outside Waratek scope19
Not applicable217
Critical8
High91
Medium126
Low11
not blocked236
Proof of concept only1
No public exploit235
2020241
Outside Waratek scope17
Not applicable224
Critical9
High112
Medium119
Low1
not blocked241
Proof of concept only2
No public exploit239
2021207
Protected by Waratek2
Outside Waratek scope1
Not applicable204
Critical3
High81
Medium119
Low4
blocked by ARMR today2
not blocked205
Exploited2
No public exploit205
2022248
Outside Waratek scope8
Not applicable240
Critical9
High116
Medium120
Low3
not blocked248
Proof of concept only7
No public exploit241
2023347
Outside Waratek scope9
Not applicable338
Critical8
High219
Medium118
Low2
not blocked347
Exploited1
Proof of concept only2
No public exploit344
2024193
Outside Waratek scope2
Not applicable191
Critical3
High96
Medium85
Low9
not blocked193
No public exploit193
202542
Not applicable42
High12
Medium27
Low3
not blocked42
No public exploit42
202683
Not applicable83
High24
Medium58
Low1
not blocked83
No public exploit83
1999200220052008201120142017202020232026
| CVE | Severity | Published▾ | Status | Exploitation | Description |
|---|---|---|---|---|---|
| CVE-2025-24848 | Medium | 2025-11-11 | Not applicable | No public exploit | Protection mechanism failure for some Intel(R) CIP software before version WIN_DCA_2.4.0.11001 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with a privileged user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are present without special internal knowledge and requires passive user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts. |
| CVE-2025-24847 | Medium | 2025-11-11 | Not applicable | No public exploit | Improper input validation for some Intel(R) CIP software before version WIN_DCA_2.4.0.11001 within Ring 3: User Applications may allow an information disclosure. Unprivileged software adversary with a privileged user combined with a low complexity attack may enable data exposure. This result may potentially occur via network access when attack requirements are present without special internal knowledge and requires passive user interaction. The potential vulnerability may impact the confidentiality (high), integrity (none) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts. |
| CVE-2025-24838 | High | 2025-11-11 | Not applicable | No public exploit | Improper privilege management for some Intel(R) CIP software before version WIN_DCA_2.4.0.11001 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable escalation of privilege. This result may potentially occur via network access when attack requirements are present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts. |
| CVE-2025-24834 | Medium | 2025-11-11 | Not applicable | No public exploit | Protection mechanism failure for some Intel(R) CIP software before version WIN_DCA_2.4.0.11001 within Ring 3: User Applications may allow an information disclosure. Unprivileged software adversary with an unauthenticated user combined with a low complexity attack may enable data exposure. This result may potentially occur via adjacent access when attack requirements are present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (high), integrity (none) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts. |
| CVE-2025-24519 | Medium | 2025-11-11 | Not applicable | No public exploit | Buffer overflow for some Intel(R) QAT Windows software before version 2.6.0. within Ring 3: User Applications may allow an escalation of privilege. System software adversary with an authenticated user combined with a low complexity attack may enable data manipulation. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (high) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts. |
| CVE-2025-24314 | Low | 2025-11-11 | Not applicable | No public exploit | Improper access control for some Intel(R) CIP software before version WIN_DCA_2.4.0.11001 within Ring 3: User Applications may allow an information disclosure. Unprivileged software adversary with a privileged user combined with a high complexity attack may enable data exposure. This result may potentially occur via network access when attack requirements are present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (low), integrity (none) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts. |
| CVE-2025-24307 | Low | 2025-11-11 | Not applicable | No public exploit | Improper privilege management for some Intel(R) CIP software before version WIN_DCA_2.4.0.11001 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable data manipulation. This result may potentially occur via network access when attack requirements are present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (low) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts. |
| CVE-2025-24299 | High | 2025-11-11 | Not applicable | No public exploit | Improper input validation for some Intel(R) CIP software before version WIN_DCA_2.4.0.11001 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable escalation of privilege. This result may potentially occur via network access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts. |
| CVE-2025-20614 | Medium | 2025-11-11 | Not applicable | No public exploit | External control of file name or path for some Intel(R) CIP software before version WIN_DCA_2.4.0.11001 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with a privileged user combined with a low complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (high), integrity (low) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts. |
| CVE-2025-20050 | Medium | 2025-11-11 | Not applicable | No public exploit | Uncontrolled search path for some Intel(R) CIP software before version WIN_DCA_2.4.0.11001 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable local code execution. This result may potentially occur via local access when attack requirements are present without special internal knowledge and requires active user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts. |
| CVE-2025-20090 | Medium | 2025-08-12 | Not applicable | No public exploit | Untrusted Pointer Dereference for some Intel(R) QuickAssist Technology software before version 2.5.0 may allow an authenticated user to potentially enable denial of service via local access. |
| CVE-2024-33607 | Medium | 2025-08-12 | Not applicable | No public exploit | Out-of-bounds read in some Intel(R) TDX module software before version TDX_1.5.07.00.774 may allow an authenticated user to potentially enable information disclosure via local access. |
| CVE-2025-20618 | High | 2025-05-13 | Not applicable | No public exploit | Stack-based buffer overflow for some Intel(R) PROSet/Wireless WiFi Software for Windows before version 23.100 may allow a privileged user to potentially enable denial of service via local access. |
| CVE-2025-20079 | Medium | 2025-05-13 | Not applicable | No public exploit | Uncontrolled search path for some Intel(R) Advisor software may allow an authenticated user to potentially enable escalation of privilege via local access. |
| CVE-2025-20062 | High | 2025-05-13 | Not applicable | No public exploit | Use after free for some Intel(R) PROSet/Wireless WiFi Software for Windows before version 23.100 may allow an unauthenticated user to potentially enable denial of service via adjacent access. |
| CVE-2025-20046 | High | 2025-05-13 | Not applicable | No public exploit | Use after free for some Intel(R) PROSet/Wireless WiFi Software for Windows before version 23.100 may allow an unauthenticated user to potentially enable denial of service via adjacent access. |
| CVE-2025-20039 | Medium | 2025-05-13 | Not applicable | No public exploit | Race condition for some Intel(R) PROSet/Wireless WiFi Software for Windows before version 23.100 may allow an unauthenticated user to potentially enable denial of service via adjacent access. |
| CVE-2025-20032 | High | 2025-05-13 | Not applicable | No public exploit | Improper input validation for some Intel(R) PROSet/Wireless WiFi Software for Windows before version 23.100 may allow a privileged user to potentially enable denial of service via local access. |
| CVE-2025-20026 | High | 2025-05-13 | Not applicable | No public exploit | Out-of-bounds read for some Intel(R) PROSet/Wireless WiFi Software for Windows before version 23.100 may allow an unauthenticated user to potentially enable denial of service via adjacent access. |
| CVE-2025-20006 | High | 2025-05-13 | Not applicable | No public exploit | Use after free for some Intel(R) PROSet/Wireless WiFi Software for Windows before version 23.100 may allow an unauthenticated user to potentially enable denial of service via adjacent access. |
| CVE-2022-26083 | High | 2025-02-14 | Not applicable | No public exploit | Generation of weak initialization vector in an Intel(R) IPP Cryptography software library before version 2021.5 may allow an unauthenticated user to potentially enable information disclosure via local access. |
| CVE-2024-39284 | Medium | 2025-02-12 | Not applicable | No public exploit | Uncontrolled search path for some Intel(R) Advisor software before version 2024.2 may allow an authenticated user to potentially enable escalation of privilege via local access. |
| CVE-2024-31858 | High | 2025-02-12 | Not applicable | No public exploit | Out-of-bounds write for some Intel(R) QuickAssist Technology software before version 2.2.0 may allow an authenticated user to potentially enable escalation of privilege via local access. |
| CVE-2024-31153 | Medium | 2025-02-12 | Not applicable | No public exploit | Improper input validation for some Intel(R) QuickAssist Technology software before version 2.2.0 may allow an authenticated user to potentially enable denial of service via local access. |
| CVE-2024-29223 | Medium | 2025-02-12 | Not applicable | No public exploit | Uncontrolled search path for some Intel(R) QuickAssist Technology software before version 2.2.0 may allow an authenticated user to potentially enable escalation of privilege via local access. |
| CVE-2024-41167 | High | 2024-11-13 | Not applicable | No public exploit | Improper input validation in UEFI firmware in some Intel(R) Server Board M10JNP2SB Family may allow a privileged user to potentially enable escalation of privilege via local access. |
| CVE-2024-39609 | High | 2024-11-13 | Not applicable | No public exploit | Improper Access Control in UEFI firmware for some Intel(R) Server Board M70KLP may allow a privileged user to potentially enable escalation of privilege via local access. |
| CVE-2024-38668 | Medium | 2024-11-13 | Not applicable | No public exploit | Uncontrolled search path for some Intel(R) Quartus(R) Prime Standard Edition software for Windows before version 23.1.1 may allow an authenticated user to potentially enable escalation of privilege via local access. |
| CVE-2024-38383 | Medium | 2024-11-13 | Not applicable | No public exploit | Uncontrolled search path for some Intel(R) Quartus(R) Prime Pro Edition software for Windows before version 24.2 may allow an authenticated user to potentially enable escalation of privilege via local access. |
| CVE-2024-37027 | Medium | 2024-11-13 | Not applicable | No public exploit | Improper Input validation in some Intel(R) VTune(TM) Profiler software before version 2024.2.0 may allow an authenticated user to potentially enable denial of service via local access. |
| CVE-2024-36488 | Medium | 2024-11-13 | Not applicable | No public exploit | Improper Access Control in some Intel(R) DSA before version 24.3.26.8 may allow an authenticated user to potentially enable escalation of privilege via local access. |
| CVE-2024-36482 | High | 2024-11-13 | Not applicable | No public exploit | Improper input validation in some Intel(R) CIP software before version 2.4.10852 may allow a privileged user to potentially enable escalation of privilege via local access. |
| CVE-2024-36294 | Medium | 2024-11-13 | Not applicable | No public exploit | Insecure inherited permissions for some Intel(R) DSA software before version 24.3.26.8 may allow an authenticated user to potentially enable escalation of privilege via local access. |
| CVE-2024-36276 | Medium | 2024-11-13 | Not applicable | No public exploit | Insecure inherited permissions for some Intel(R) CIP software before version 2.4.10852 may allow an authenticated user to potentially enable escalation of privilege via local access. |
| CVE-2024-36253 | Medium | 2024-11-13 | Not applicable | No public exploit | Uncontrolled search path in the Intel(R) SDP Tool for Windows software all version may allow an authenticated user to potentially enable escalation of privilege via local access. |
| CVE-2024-36245 | Medium | 2024-11-13 | Not applicable | No public exploit | Uncontrolled search path element in some Intel(R) VTune(TM) Profiler software before version 2024.2.0 may allow an authenticated user to potentially enable escalation of privilege via local access. |
| CVE-2024-35201 | Medium | 2024-11-13 | Not applicable | No public exploit | Incorrect default permissions in the Intel(R) SDP Tool for Windows software all versions may allow an authenticated user to enable escalation of privilege via local access. |
| CVE-2024-32485 | Low | 2024-11-13 | Not applicable | No public exploit | Improper Input Validation in some Intel(R) VROC software before version 8.6.0.2003 may allow an authenticated user to potentially enable denial of service via local access. |
| CVE-2024-32483 | High | 2024-11-13 | Not applicable | No public exploit | Improper access control for some Intel(R) EMA software before version 1.13.1.0 may allow an authenticated user to potentially enable escalation of privilege via local access. |
| CVE-2024-29079 | Medium | 2024-11-13 | Not applicable | No public exploit | Insufficient control flow management in some Intel(R) VROC software before version 8.6.0.3001 may allow an authenticated user to potentially enable escalation of privilege via local access. |
| CVE-2024-28952 | Medium | 2024-11-13 | Not applicable | No public exploit | Uncontrolled search path for some Intel(R) IPP software for Windows before version 2021.12.0 may allow an authenticated user to potentially enable escalation of privilege via local access. |
| CVE-2024-28049 | Medium | 2024-11-13 | Not applicable | No public exploit | Improper input validation in firmware for some Intel(R) PROSet/Wireless Software and Intel(R) Killer(TM) Wi-Fi wireless products before version 23.40 may allow an unauthenticated user to enable denial of service via adjacent access. |
| CVE-2024-25563 | Medium | 2024-11-13 | Not applicable | No public exploit | Improper initialization in firmware for some Intel(R) PROSet/Wireless Software and Intel(R) Killer(TM) Wi-Fi before version 23.40 may allow a privileged user to potentially enable information disclosure via local access. |
| CVE-2024-23198 | Medium | 2024-11-13 | Not applicable | No public exploit | Improper input validation in firmware for some Intel(R) PROSet/Wireless Software and Intel(R) Killer(TM) Wi-Fi products before version 23.40 may allow an unauthenticated user to enable denial of service via adjacent access. |
| CVE-2024-36261 | Medium | 2024-09-16 | Not applicable | No public exploit | Improper access control in Intel(R) RAID Web Console software all versions may allow an authenticated user to potentially enable denial of service via adjacent access. |
| CVE-2024-36247 | Medium | 2024-09-16 | Not applicable | No public exploit | Improper access control in Intel(R) RAID Web Console all versions may allow an authenticated user to potentially enable denial of service via adjacent access. |
| CVE-2024-34545 | Medium | 2024-09-16 | Not applicable | No public exploit | Improper input validation in some Intel(R) RAID Web Console software all versions may allow an authenticated user to potentially enable information disclosure via adjacent access. |
| CVE-2024-34543 | High | 2024-09-16 | Not applicable | No public exploit | Improper access control in Intel(R) RAID Web Console software for all versions may allow an authenticated user to potentially enable escalation of privilege via local access. |
| CVE-2024-34153 | High | 2024-09-16 | Not applicable | No public exploit | Uncontrolled search path element in Intel(R) RAID Web Console software for all versions may allow an authenticated user to potentially enable escalation of privilege via local access. |
| CVE-2024-33848 | Medium | 2024-09-16 | Not applicable | No public exploit | Uncaught exception in Intel(R) RAID Web Console software all versions may allow an authenticated user to potentially enable denial of service via local access. |
| CVE-2024-32940 | Medium | 2024-09-16 | Not applicable | No public exploit | Improper access control in Intel(R) RAID Web Console software for all versions may allow an authenticated user to potentially enable denial of service via adjacent access. |
| CVE-2024-32666 | Medium | 2024-09-16 | Not applicable | No public exploit | NULL pointer dereference in Intel(R) RAID Web Console software for all versions may allow an authenticated user to potentially enable denial of service via local access. |
| CVE-2024-28170 | Medium | 2024-09-16 | Not applicable | No public exploit | Improper access control in Intel(R) RAID Web Console all versions may allow an authenticated user to potentially enable information disclosure via local access. |
| CVE-2024-39283 | High | 2024-08-14 | Not applicable | No public exploit | Incomplete filtering of special elements in Intel(R) TDX module software before version TDX_1.5.01.00.592 may allow an authenticated user to potentially enable escalation of privilege via local access. |
| CVE-2024-34163 | High | 2024-08-14 | Not applicable | No public exploit | Improper input validation in firmware for some Intel(R) NUC may allow a privileged user to potentially enableescalation of privilege via local access. |
| CVE-2024-29015 | Medium | 2024-08-14 | Not applicable | No public exploit | Uncontrolled search path in some Intel(R) VTune(TM) Profiler software before versions 2024.1 may allow an authenticated user to potentially enable escalation of privilege via local access. |
| CVE-2024-28947 | High | 2024-08-14 | Not applicable | No public exploit | Improper input validation in kernel mode driver for some Intel(R) Server Board S2600ST Family firmware before version 02.01.0017 may allow a privileged user to potentially enable escalation of privilege via local access. |
| CVE-2024-28887 | Medium | 2024-08-14 | Not applicable | No public exploit | Uncontrolled search path in some Intel(R) IPP software before version 2021.11 may allow an authenticated user to potentially enable escalation of privilege via local access. |
| CVE-2024-28876 | Medium | 2024-08-14 | Not applicable | No public exploit | Uncontrolled search path for some Intel(R) MPI Library software before version 2021.12 may allow an authenticated user to potentially enable escalation of privilege via local access. |
| CVE-2024-28172 | Medium | 2024-08-14 | Not applicable | No public exploit | Uncontrolled search path for some Intel(R) Trace Analyzer and Collector software before version 2022.1 may allow an authenticated user to potentially enable escalation of privilege via local access. |
| CVE-2024-28050 | Medium | 2024-08-14 | Not applicable | No public exploit | Improper access control in some Intel(R) Arc(TM) & Iris(R) Xe Graphics software before version 31.0.101.4824 may allow an authenticated user to potentially enable denial of service via local access. |
| CVE-2024-28046 | Medium | 2024-08-14 | Not applicable | No public exploit | Uncontrolled search path in some Intel(R) GPA software before version 2024.1 may allow an authenticated user to potentially enable escalation of privilege via local access. |
| CVE-2024-27461 | Medium | 2024-08-14 | Not applicable | No public exploit | Incorrect default permissions in software installer for Intel(R) MAS (GUI) may allow an authenticated user to potentially enable denial of service via local access. |
| CVE-2024-26027 | Medium | 2024-08-14 | Not applicable | No public exploit | Uncontrolled search path for some Intel(R) Simics Package Manager software before version 1.8.3 may allow an authenticated user to potentially enable escalation of privilege via local access. |
| CVE-2024-26025 | Medium | 2024-08-14 | Not applicable | No public exploit | Incorrect default permissions for some Intel(R) Advisor software before version 2024.1 may allow an authenticated user to potentially enable escalation of privilege via local access. |
| CVE-2024-26022 | High | 2024-08-14 | Not applicable | No public exploit | Improper access control in some Intel(R) UEFI Integrator Tools on Aptio V for Intel(R) NUC may allow an authenticated user to potentially enable escalation of privilege via local access. |
| CVE-2024-25576 | High | 2024-08-14 | Not applicable | No public exploit | improper access control in firmware for some Intel(R) FPGA products before version 24.1 may allow a privileged user to enable escalation of privilege via local access. |
| CVE-2024-25562 | Medium | 2024-08-14 | Not applicable | No public exploit | Improper buffer restrictions in some Intel(R) Distribution for GDB software before version 2024.0.1 may allow an authenticated user to potentially enable denial of service via local access. |
| CVE-2024-25561 | Medium | 2024-08-14 | Not applicable | No public exploit | Insecure inherited permissions in some Intel(R) HID Event Filter software installers before version 2.2.2.1 may allow an authenticated user to potentially enable escalation of privilege via local access. |
| CVE-2024-24986 | Critical | 2024-08-14 | Not applicable | No public exploit | Improper access control in Linux kernel mode driver for some Intel(R) Ethernet Network Controllers and Adapters before version 28.3 may allow an authenticated user to potentially enable escalation of privilege via local access. |
| CVE-2024-24977 | Medium | 2024-08-14 | Not applicable | No public exploit | Uncontrolled search path for some Intel(R) License Manager for FLEXlm product software before version 11.19.5.0 may allow an authenticated user to potentially enable escalation of privilege via local access. |
| CVE-2024-24973 | Low | 2024-08-14 | Not applicable | No public exploit | Improper input validation for some Intel(R) Distribution for GDB software before version 2024.0.1 may allow an authenticated user to potentially enable denial of service via local access. |
| CVE-2024-24580 | Medium | 2024-08-14 | Not applicable | No public exploit | Improper conditions check in some Intel(R) Data Center GPU Max Series 1100 and 1550 products may allow a privileged user to potentially enable denial of service via local access. |
| CVE-2024-23981 | Critical | 2024-08-14 | Not applicable | No public exploit | Wrap-around error in Linux kernel mode driver for some Intel(R) Ethernet Network Controllers and Adapters before version 28.3 may allow an authenticated user to potentially enable escalation of privilege via local access. |
| CVE-2024-23909 | Medium | 2024-08-14 | Not applicable | No public exploit | Uncontrolled search path in some Intel(R) FPGA SDK for OpenCL(TM) software technology may allow an authenticated user to potentially enable escalation of privilege via local access. |
| CVE-2024-23908 | Medium | 2024-08-14 | Not applicable | No public exploit | Insecure inherited permissions in some Flexlm License Daemons for Intel(R) FPGA software before version v11.19.5.0 may allow an authenticated user to potentially enable escalation of privilege via local access. |
| CVE-2024-23907 | Medium | 2024-08-14 | Not applicable | No public exploit | Uncontrolled search path in some Intel(R) High Level Synthesis Compiler software before version 23.4 may allow an authenticated user to potentially enable escalation of privilege via local access. |
| CVE-2024-23499 | High | 2024-08-14 | Not applicable | No public exploit | Protection mechanism failure in Linux kernel mode driver for some Intel(R) Ethernet Network Controllers and Adapters E810 Series before version 28.3 may allow an unauthenticated user to potentially enable denial of service via network access. |
| CVE-2024-23497 | Critical | 2024-08-14 | Not applicable | No public exploit | Out-of-bounds write in Linux kernel mode driver for some Intel(R) Ethernet Network Controllers and Adapters before version 28.3 may allow an authenticated user to potentially enable escalation of privilege via local access. |
| CVE-2024-23495 | Medium | 2024-08-14 | Not applicable | No public exploit | Incorrect default permissions in some Intel(R) Distribution for GDB software before version 2024.0.1 may allow an authenticated user to potentially enable escalation of privilege via local access. |
| CVE-2024-23491 | Medium | 2024-08-14 | Not applicable | No public exploit | Uncontrolled search path in some Intel(R) Distribution for GDB software before version 2024.0.1 may allow an authenticated user to potentially enable escalation of privilege via local access. |
| CVE-2024-23489 | Medium | 2024-08-14 | Not applicable | No public exploit | Uncontrolled search path for some Intel(R) VROC software before version 8.6.0.1191 may allow an authenticated user to potentially enable escalation of privilege via local access. |
| CVE-2024-22184 | Medium | 2024-08-14 | Not applicable | No public exploit | Uncontrolled search path for some Intel(R) Quartus(R) Prime Pro Edition Design Software before version 24.1 may allow an authenticated user to potentially enable escalation of privilege via local access. |
| CVE-2024-21801 | High | 2024-08-14 | Not applicable | No public exploit | Insufficient control flow management in some Intel(R) TDX module software before version 1.5.05.46.698 may allow a privileged user to potentially enable denial of service via local access. |
| CVE-2024-21784 | Medium | 2024-08-14 | Not applicable | No public exploit | Uncontrolled search path for some Intel(R) IPP Cryptography software before version 2021.11 may allow an authenticated user to potentially enable escalation of privilege via local access. |
| CVE-2023-43489 | Medium | 2024-08-14 | Not applicable | No public exploit | Improper access control for some Intel(R) CIP software before version 2.4.10717 may allow an authenticated user to potentially enable denial of service via local access. |
| CVE-2024-21862 | High | 2024-05-16 | Not applicable | No public exploit | Uncontrolled search path in some Intel(R) Quartus(R) Prime Standard Edition Design software before version 23.1 may allow an authenticated user to potentially enable escalation of privilege via local access. |
| CVE-2024-21861 | High | 2024-05-16 | Not applicable | No public exploit | Uncontrolled search path in some Intel(R) GPA Framework software before version 2023.4 may allow an authenticated user to potentially enable escalation of privilege via local access. |
| CVE-2024-21837 | High | 2024-05-16 | Not applicable | No public exploit | Uncontrolled search path in some Intel(R) Quartus(R) Prime Lite Edition Design software before version 23.1 may allow an authenticated user to potentially enable escalation of privilege via local access. |
| CVE-2024-21835 | High | 2024-05-16 | Not applicable | No public exploit | Insecure inherited permissions in some Intel(R) XTU software before version 7.14.0.15 may allow an authenticated user to potentially enable escalation of privilege via local access. |
| CVE-2024-21831 | High | 2024-05-16 | Not applicable | No public exploit | Uncontrolled search path in some Intel(R) Processor Diagnostic Tool software before version 4.1.9.41 may allow an authenticated user to potentially enable escalation of privilege via local access. |
| CVE-2024-21814 | High | 2024-05-16 | Not applicable | No public exploit | Uncontrolled search path for some Intel(R) Chipset Device Software before version 10.1.19444.8378 may allow an authenticated user to potentially enable escalation of privilege via local access. |
| CVE-2024-21809 | High | 2024-05-16 | Not applicable | No public exploit | Improper conditions check for some Intel(R) Quartus(R) Prime Lite Edition Design software before version 23.1 may allow an authenticated user to potentially enable escalation of privilege via local access. |
| CVE-2024-21788 | High | 2024-05-16 | Not applicable | No public exploit | Uncontrolled search path in some Intel(R) GPA software before version 2023.4 may allow an authenticated user to potentially enable escalation of privilege via local access. |
| CVE-2024-21777 | High | 2024-05-16 | Not applicable | No public exploit | Uncontrolled search path in some Intel(R) Quartus(R) Prime Pro Edition Design software before version 23.4 may allow an authenticated user to potentially enable escalation of privilege via local access. |
| CVE-2024-21772 | High | 2024-05-16 | Not applicable | No public exploit | Uncontrolled search path in some Intel(R) Advisor software before version 2024.0 may allow an authenticated user to potentially enable escalation of privilege via local access. |
| CVE-2023-48368 | Medium | 2024-05-16 | Not applicable | No public exploit | Improper input validation in Intel(R) Media SDK software all versions may allow an authenticated user to potentially enable denial of service via local access. |
| CVE-2023-47855 | Medium | 2024-05-16 | Not applicable | No public exploit | Improper input validation in some Intel(R) TDX module software before version 1.5.05.46.698 may allow a privileged user to potentially enable escalation of privilege via local access. |
| CVE-2023-47169 | Medium | 2024-05-16 | Not applicable | No public exploit | Improper buffer restrictions in Intel(R) Media SDK software all versions may allow an authenticated user to potentially enable denial of service via local access. |
| CVE-2023-46691 | High | 2024-05-16 | Not applicable | No public exploit | Use after free in Intel(R) Power Gadget software for Windows all versions may allow an authenticated user to potentially enable escalation of privilege via local access. |