Overview 1,790 matches · 2 in Waratek scope · 2 protected · 8 exploited · 4 CISA KEV · 24 public PoC · 8 EPSS ≥ 0.5
1,790matches
2in Waratek scope0.1%
2protected0.1%
8exploited0.4%
4CISA KEV0.2%
24public PoC1.3%
8EPSS ≥ 0.50.4%
Protected by Waratek
2
0.1%
Rule in development
0
0.0%
Mitigation candidate
0
0.0%
No exploit published
0
0.0%
Outside Waratek scope
61
3.4%
Not applicable
1,727
96.5%
Withdrawn CVE
0
0.0%
blocked by ARMR today
2
0.1%
partly blocked
0
0.0%
not blocked
1,788
99.9%
not established
0
0.0%
unrecorded
0
0.0%
split by
peak 347 / year
19993
Not applicable3
High1
Medium1
Low1
not blocked3
Working exploit published1
No public exploit2
20006
Not applicable6
High2
Medium4
not blocked6
Working exploit published4
No public exploit2
20012
Not applicable2
High1
Low1
not blocked2
No public exploit2
20022
Not applicable2
Medium1
Low1
not blocked2
No public exploit2
20031
Not applicable1
Medium1
not blocked1
No public exploit1
20041
Not applicable1
Medium1
not blocked1
No public exploit1
20051
Not applicable1
High1
not blocked1
No public exploit1
20066
Not applicable6
High2
Medium4
not blocked6
Working exploit published2
No public exploit4
20075
Not applicable5
High2
Medium2
Low1
not blocked5
Working exploit published1
No public exploit4
20083
Not applicable3
High2
Low1
not blocked3
No public exploit3
20094
Not applicable4
High3
Medium1
not blocked4
No public exploit4
20102
Not applicable2
Medium2
not blocked2
No public exploit2
20111
Not applicable1
High1
not blocked1
No public exploit1
20122
Not applicable2
High1
Medium1
not blocked2
No public exploit2
20137
Not applicable7
High2
Medium2
Low3
not blocked7
Exploited1
No public exploit6
20143
Not applicable3
Medium3
not blocked3
Working exploit published1
No public exploit2
20150
20169
Not applicable9
High6
Medium3
not blocked9
No public exploit9
201736
Outside Waratek scope1
Not applicable35
Critical5
High21
Medium7
Low3
not blocked36
Exploited2
Working exploit published1
Proof of concept only1
No public exploit32
201899
Outside Waratek scope4
Not applicable95
Critical3
High45
Medium51
not blocked99
Exploited2
Working exploit published1
Proof of concept only2
No public exploit94
2019236
Outside Waratek scope19
Not applicable217
Critical8
High91
Medium126
Low11
not blocked236
Proof of concept only1
No public exploit235
2020241
Outside Waratek scope17
Not applicable224
Critical9
High112
Medium119
Low1
not blocked241
Proof of concept only2
No public exploit239
2021207
Protected by Waratek2
Outside Waratek scope1
Not applicable204
Critical3
High81
Medium119
Low4
blocked by ARMR today2
not blocked205
Exploited2
No public exploit205
2022248
Outside Waratek scope8
Not applicable240
Critical9
High116
Medium120
Low3
not blocked248
Proof of concept only7
No public exploit241
2023347
Outside Waratek scope9
Not applicable338
Critical8
High219
Medium118
Low2
not blocked347
Exploited1
Proof of concept only2
No public exploit344
2024193
Outside Waratek scope2
Not applicable191
Critical3
High96
Medium85
Low9
not blocked193
No public exploit193
202542
Not applicable42
High12
Medium27
Low3
not blocked42
No public exploit42
202683
Not applicable83
High24
Medium58
Low1
not blocked83
No public exploit83
1999200220052008201120142017202020232026
| CVE | Severity | Published▾ | Status | Exploitation | Description |
|---|---|---|---|---|---|
| CVE-2023-46689 | High | 2024-05-16 | Not applicable | No public exploit | Improper neutralization in Intel(R) Power Gadget software for macOS all versions may allow an authenticated user to potentially enable escalation of privilege via local access. |
| CVE-2023-45846 | Medium | 2024-05-16 | Not applicable | No public exploit | Incomplete cleanup in Intel(R) Power Gadget software for macOS all versions may allow an authenticated user to potentially enable denial of service via local access. |
| CVE-2023-45745 | High | 2024-05-16 | Not applicable | No public exploit | Improper input validation in some Intel(R) TDX module software before version 1.5.05.46.698 may allow a privileged user to potentially enable escalation of privilege via local access. |
| CVE-2023-45743 | High | 2024-05-16 | Not applicable | No public exploit | Uncontrolled search path in some Intel(R) DSA software uninstallers before version 23.4.39.10 may allow an authenticated user to potentially enable escalation of privilege via local access. |
| CVE-2023-45736 | High | 2024-05-16 | Not applicable | No public exploit | Insecure inherited permissions in Intel(R) Power Gadget software for Windows all versions may allow an authenticated user to potentially enable escalation of privilege via local access. |
| CVE-2023-45320 | High | 2024-05-16 | Not applicable | No public exploit | Uncontrolled search path element in some Intel(R) VTune(TM) Profiler software before version 2024.0 may allow an authenticated user to potentially enable escalation of privilege via local access. |
| CVE-2023-45315 | Medium | 2024-05-16 | Not applicable | No public exploit | Improper initialization in some Intel(R) Power Gadget software for Windwos all versions may allow an authenticated user to potentially enable denial of service via local access. |
| CVE-2023-45221 | High | 2024-05-16 | Not applicable | No public exploit | Improper buffer restrictions in Intel(R) Media SDK all versions may allow an authenticated user to potentially enable escalation of privilege via local access. |
| CVE-2023-45217 | High | 2024-05-16 | Not applicable | No public exploit | Improper access control in Intel(R) Power Gadget software for Windows all versions may allow an authenticated user to potentially enable escalation of privilege via local access. |
| CVE-2023-43748 | High | 2024-05-16 | Not applicable | No public exploit | Improper access control in some Intel(R) GPA Framework software installers before version 2023.3 may allow an authenticated user to potentially enable escalation of privilege via local access. |
| CVE-2023-43629 | High | 2024-05-16 | Not applicable | No public exploit | Incorrect default permissions in some Intel(R) GPA software installers before version 2023.3 may allow an authenticated user to potentially enable escalation of privilege via local access. |
| CVE-2023-42773 | High | 2024-05-16 | Not applicable | No public exploit | Improper neutralization in Intel(R) Power Gadget software for Windows all versions may allow an authenticated user to potentially enable escalation of privilege via local access. |
| CVE-2023-41961 | High | 2024-05-16 | Not applicable | No public exploit | Uncontrolled search path in some Intel(R) GPA software before version 2023.3 may allow an authenticated user to potentially enable escalation of privilege via local access. |
| CVE-2023-41234 | Medium | 2024-05-16 | Not applicable | No public exploit | NULL pointer dereference in Intel(R) Power Gadget software for Windows all versions may allow an authenticated user to potentially enable denial of service via local access. |
| CVE-2023-40071 | High | 2024-05-16 | Not applicable | No public exploit | Improper access control in some Intel(R) GPA software installers before version 2023.3 may allow an authenticated user to potentially enable escalation of privilege via local access. |
| CVE-2023-40070 | High | 2024-05-16 | Not applicable | No public exploit | Improper access control in some Intel(R) Power Gadget software for macOS all versions may allow an authenticated user to potentially enable escalation of privilege via local access. |
| CVE-2023-38581 | High | 2024-05-16 | Not applicable | No public exploit | Buffer overflow in Intel(R) Power Gadget software for Windows all versions may allow an authenticated user to potentially enable escalation of privilege via local access. |
| CVE-2023-38420 | Low | 2024-05-16 | Not applicable | No public exploit | Improper conditions check in Intel(R) Power Gadget software for macOS all versions may allow an authenticated user to potentially enable information disclosure via local access. |
| CVE-2023-35192 | High | 2024-05-16 | Not applicable | No public exploit | Uncontrolled search path in some Intel(R) GPA Framework software before version 2023.3 may allow an authenticated user to potentially enable escalation of privilege via local access. |
| CVE-2023-24460 | High | 2024-05-16 | Not applicable | No public exploit | Incorrect default permissions in some Intel(R) GPA software installers before version 2023.3 may allow an authenticated user to potentially enable escalation of privilege via local access. |
| CVE-2022-37341 | High | 2024-05-16 | Not applicable | No public exploit | Improper access control in some Intel(R) Ethernet Adapters and Intel(R) Ethernet Controller I225 Manageability firmware may allow a privileged user to potentially enable escalation of privilege via local access. |
| CVE-2023-50197 | High | 2024-05-03 | Not applicable | No public exploit | Intel Driver & Support Assistant Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Intel Driver & Support Assistant. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the DSA Service. By creating a symbolic link, an attacker can abuse the service to write a file. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of SYSTEM. Was ZDI-CAN-21845. |
| CVE-2023-42099 | High | 2024-05-03 | Not applicable | No public exploit | Intel Driver & Support Assistant Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Intel Driver & Support Assistant. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the DSA Service. By creating a symbolic link, an attacker can abuse the service to delete a file. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of SYSTEM. Was ZDI-CAN-21846. |
| CVE-2024-28084 | High | 2024-03-03 | Not applicable | No public exploit | p2putil.c in iNet wireless daemon (IWD) through 2.15 allows attackers to cause a denial of service (daemon crash) or possibly have unspecified other impact because of initialization issues in situations where parsing of advertised service information fails. |
| CVE-2021-33162 | High | 2024-02-23 | Not applicable | No public exploit | Improper access control in some Intel(R) Ethernet Adapters and Intel(R) Ethernet Controller I225 Manageability firmware may allow an authenticated user to potentially enable escalation of privilege via local access. |
| CVE-2021-33161 | High | 2024-02-23 | Not applicable | No public exploit | Improper input validation in some Intel(R) Ethernet Adapters and Intel(R) Ethernet Controller I225 Manageability firmware may allow a privileged user to potentially enable escalation of privilege via local access. |
| CVE-2021-33158 | High | 2024-02-23 | Not applicable | No public exploit | Improper neutralization in some Intel(R) Ethernet Adapters and Intel(R) Ethernet Controller I225 Manageability firmware may allow a privileged user to potentially enable escalation of privilege via local access. |
| CVE-2021-33157 | High | 2024-02-23 | Not applicable | No public exploit | Insufficient control flow management in some Intel(R) Ethernet Adapters and Intel(R) Ethernet Controller I225 Manageability firmware may allow a privileged user to potentially enable escalation of privilege via local access. |
| CVE-2021-33146 | Medium | 2024-02-23 | Not applicable | No public exploit | Improper input validation in some Intel(R) Ethernet Adapters and Intel(R) Ethernet Controller I225 Manageability firmware may allow an unauthenticated user to potentially enable information disclosure via network access. |
| CVE-2021-33145 | High | 2024-02-23 | Not applicable | No public exploit | Uncaught exception in some Intel(R) Ethernet Adapters and Intel(R) Ethernet Controller I225 Manageability firmware may allow a privileged user to potentially enable escalation of privilege via local access. |
| CVE-2021-33142 | Medium | 2024-02-23 | Not applicable | No public exploit | Improper input validation in some Intel(R) Ethernet Adapters and Intel(R) Ethernet Controller I225 Manageability firmware may allow a privileged user to potentially enable denial of service via local access. |
| CVE-2021-33141 | High | 2024-02-23 | Not applicable | No public exploit | Improper input validation in some Intel(R) Ethernet Adapters and Intel(R) Ethernet Controller I225 Manageability firmware may allow an unauthenticated user to potentially enable denial of service via network access. |
| CVE-2023-52161 | High | 2024-02-22 | Not applicable | No public exploit | The Access Point functionality in eapol_auth_key_handle in eapol.c in iNet wireless daemon (IWD) before 2.14 allows attackers to gain unauthorized access to a protected Wi-Fi network. An attacker can complete the EAPOL handshake by skipping Msg2/4 and instead sending Msg4/4 with an all-zero key. |
| CVE-2023-42776 | Medium | 2024-02-14 | Not applicable | No public exploit | Improper input validation in some Intel(R) SGX DCAP software for Windows before version 1.19.100.3 may allow an authenticateed user to potentially enable information disclosure via local access. |
| CVE-2023-41252 | Medium | 2024-02-14 | Not applicable | No public exploit | Out-of-bounds read in some Intel(R) QAT software drivers for Windows before version QAT1.7-W-1.11.0 may allow an authenticated user to potentially enable denial of service via local access. |
| CVE-2023-41231 | High | 2024-02-14 | Not applicable | No public exploit | Incorrect default permissions in some ACAT software maintained by Intel(R) before version 2.0.0 may allow an authenticated user to potentially enable escalation of privilege via local access. |
| CVE-2023-41091 | High | 2024-02-14 | Not applicable | No public exploit | Uncontrolled search path for some Intel(R) MPI Library Software before version 2021.11 may allow an authenticated user to potentially enable escalation of privilege via local access. |
| CVE-2023-41090 | Medium | 2024-02-14 | Not applicable | No public exploit | Race condition in some Intel(R) MAS software before version 2.3 may allow a privileged user to potentially enable escalation of privilege via local access. |
| CVE-2023-40161 | High | 2024-02-14 | Not applicable | No public exploit | Improper access control in some Intel Unite(R) Client software before version 4.2.35041 may allow an authenticated user to potentially enable escalation of privilege via local access. |
| CVE-2023-40156 | High | 2024-02-14 | Not applicable | No public exploit | Uncontrolled search path element in some Intel(R) SSU software before version 3.0.0.2 may allow an authenticated user to potentially enable escalation of privilege via local access. |
| CVE-2023-40154 | High | 2024-02-14 | Not applicable | No public exploit | Incorrect default permissions in the Intel(R) SUR for Gameplay Software before version 2.0.1901 may allow privillaged user to potentially enable escalation of privilege via local access. |
| CVE-2023-39941 | High | 2024-02-14 | Not applicable | No public exploit | Improper access control in some Intel(R) SUR software before version 2.4.10587 may allow an unauthenticated user to potentially enable denial of service via adjacent access. |
| CVE-2023-39932 | Medium | 2024-02-14 | Not applicable | No public exploit | Uncontrolled search path in the Intel(R) SUR for Gameplay Software before version 2.0.1901 may allow a privillaged user to potentially enable escalation of privilege via local access. |
| CVE-2023-39432 | High | 2024-02-14 | Not applicable | No public exploit | Improper access control element in some Intel(R) Ethernet tools and driver install software, before versions 28.2, may allow an authenticated user to potentially enable escalation of privilege via local access. |
| CVE-2023-39425 | High | 2024-02-14 | Not applicable | No public exploit | Improper access control in some Intel(R) DSA software before version 23.4.33 may allow an authenticated user to potentially enable escalation of privilege via local access. |
| CVE-2023-38566 | High | 2024-02-14 | Not applicable | No public exploit | Uncontrolled search path in some Intel(R) ISPC software before version 1.21.0 may allow an authenticated user to potentially enable escalation of privilege via local access. |
| CVE-2023-38561 | High | 2024-02-14 | Not applicable | No public exploit | Improper access control in some Intel(R) XTU software before version 7.12.0.29 may allow an authenticated user to potentially enable escalation of privilege via local access. |
| CVE-2023-38135 | Medium | 2024-02-14 | Not applicable | No public exploit | Improper authorization in some Intel(R) PM software may allow a privileged user to potentially enable escalation of privilege via local access. |
| CVE-2023-36493 | High | 2024-02-14 | Not applicable | No public exploit | Uncontrolled search path in some Intel(R) SDK for OpenCL(TM) Applications software may allow an authenticated user to potentially enable escalation of privilege via local access. |
| CVE-2023-36490 | Medium | 2024-02-14 | Not applicable | No public exploit | Improper initialization in some Intel(R) MAS software before version 2.3 may allow an authenticated user to potentially enable denial of service via local access. |
| CVE-2023-35769 | High | 2024-02-14 | Not applicable | No public exploit | Uncontrolled search path in some Intel(R) CIP software before version 2.4.10577 may allow an authenticated user to potentially enable escalation of privilege via local access. |
| CVE-2023-35121 | High | 2024-02-14 | Not applicable | No public exploit | Improper access control in the Intel(R) oneAPI DPC++/C++ Compiler before version 2022.2.1 for some Intel(R) oneAPI Toolkits before version 2022.3.1 may allow authenticated user to potentially enable escalation of privilege via local access. |
| CVE-2023-35062 | Medium | 2024-02-14 | Not applicable | No public exploit | Improper access control in some Intel(R) DSA software before version 23.4.33 may allow a privileged user to potentially enable escalation of privilege via local access. |
| CVE-2023-35060 | High | 2024-02-14 | Not applicable | No public exploit | Uncontrolled search path in some Intel(R) Battery Life Diagnostic Tool software before version 2.3.1 may allow an authenticated user to potentially enable escalation of privilege via local access. |
| CVE-2023-35003 | High | 2024-02-14 | Not applicable | No public exploit | Path transversal in some Intel(R) VROC software before version 8.0.8.1001 may allow an authenticated user to potentially enable escalation of privilege via local access. |
| CVE-2023-34983 | Medium | 2024-02-14 | Not applicable | No public exploit | Improper input validation for some Intel(R) PROSet/Wireless and Intel(R) Killer(TM) Wi-Fi software before version 22.240 may allow an unauthenticated user to potentially enable denial of service via adjacent access. |
| CVE-2023-34351 | High | 2024-02-14 | Not applicable | No public exploit | Buffer underflow in some Intel(R) PCM software before version 202307 may allow an unauthenticated user to potentially enable denial of service via network access. |
| CVE-2023-34315 | High | 2024-02-14 | Not applicable | No public exploit | Incorrect default permissions in some Intel(R) VROC software before version 8.0.8.1001 may allow an authenticated user to potentially enable escalation of privilege via local access. |
| CVE-2023-33875 | High | 2024-02-14 | Not applicable | No public exploit | Improper access control for some Intel(R) PROSet/Wireless and Intel(R) Killer(TM) Wi-Fi software before version 22.240 may allow an unauthenticated user to potentially enable denial of service via local access.. |
| CVE-2023-33870 | High | 2024-02-14 | Not applicable | No public exploit | Insecure inherited permissions in some Intel(R) Ethernet tools and driver install software may allow an authenticated user to potentially enable escalation of privilege via local access. |
| CVE-2023-32651 | Medium | 2024-02-14 | Not applicable | No public exploit | Improper validation of specified type of input for some Intel(R) PROSet/Wireless and Intel(R) Killer(TM) Wi-Fi software before version 22.240 may allow an unauthenticated user to potentially enable denial of service via adjacent access. |
| CVE-2023-32647 | High | 2024-02-14 | Not applicable | No public exploit | Improper access control in some Intel(R) XTU software before version 7.12.0.29 may allow an authenticated user to potentially enable escalation of privilege via local access. |
| CVE-2023-32646 | High | 2024-02-14 | Not applicable | No public exploit | Uncontrolled search path element in some Intel(R) VROC software before version 8.0.8.1001 may allow an authenticated user to potentially enable escalation of privilege via local access. |
| CVE-2023-32644 | Medium | 2024-02-14 | Not applicable | No public exploit | Protection mechanism failure for some Intel(R) PROSet/Wireless and Intel(R) Killer(TM) Wi-Fi software before version 22.240 may allow an unauthenticated user to potentially enable denial of service via adjacent access. |
| CVE-2023-32642 | Medium | 2024-02-14 | Not applicable | No public exploit | Insufficient adherence to expected conventions for some Intel(R) PROSet/Wireless and Intel(R) Killer(TM) Wi-Fi software before version 22.240 may allow an unauthenticated user to potentially enable denial of service via adjacent access. |
| CVE-2023-32618 | High | 2024-02-14 | Outside Waratek scope | No public exploit | Uncontrolled search path in some Intel(R) oneAPI Toolkit and component software installers before version 4.3.2 may allow an authenticated user to potentially enable escalation of privilege via local access. |
| CVE-2023-32280 | Medium | 2024-02-14 | Not applicable | No public exploit | Insufficiently protected credentials in some Intel(R) Server Product OpenBMC firmware before versions egs-1.05 may allow an unauthenticated user to enable information disclosure via network access. |
| CVE-2023-31271 | High | 2024-02-14 | Not applicable | No public exploit | Improper access control in some Intel(R) VROC software before version 8.0.8.1001 may allow an authenticated user to potentially enable escalation of privilege via local access. |
| CVE-2023-31189 | High | 2024-02-14 | Not applicable | No public exploit | Improper authentication in some Intel(R) Server Product OpenBMC firmware before version egs-1.09 may allow an authenticated user to enable escalation of privilege via local access. |
| CVE-2023-30767 | Medium | 2024-02-14 | Not applicable | No public exploit | Improper buffer restrictions in Intel(R) Optimization for TensorFlow before version 2.13.0 may allow an authenticated user to potentially enable escalation of privilege via local access. |
| CVE-2023-29162 | Medium | 2024-02-14 | Not applicable | No public exploit | Improper buffer restrictions the Intel(R) C++ Compiler Classic before version 2021.8 for Intel(R) oneAPI Toolkits before version 2022.3.1 may allow a privileged user to potentially enable escalation of privilege via local access. |
| CVE-2023-29153 | Medium | 2024-02-14 | Not applicable | No public exploit | Uncontrolled resource consumption for some Intel(R) SPS firmware before version SPS_E5_06.01.04.002.0 may allow a privileged user to potentially enable denial of service via network access. |
| CVE-2023-28745 | Medium | 2024-02-14 | Not applicable | No public exploit | Uncontrolled search path in Intel(R) QSFP+ Configuration Utility software, all versions, may allow an authenticated user to potentially enable escalation of privilege via local access. |
| CVE-2023-28739 | High | 2024-02-14 | Not applicable | No public exploit | Incorrect default permissions in some Intel(R) Chipset Driver Software before version 10.1.19444.8378 may allow an authenticated user to potentially enable escalation of privilege via local access. |
| CVE-2023-28720 | Medium | 2024-02-14 | Not applicable | No public exploit | Improper initialization for some Intel(R) PROSet/Wireless and Intel(R) Killer(TM) Wi-Fi software before version 22.240 may allow an unauthenticated user to potentially enable denial of service via adjacent access.. |
| CVE-2023-28715 | Medium | 2024-02-14 | Outside Waratek scope | No public exploit | Improper access control in some Intel(R) oneAPI Toolkit and component software installers before version 4.3.2 may allow an authenticated user to potentially enable denial of service via local access. |
| CVE-2023-28407 | High | 2024-02-14 | Not applicable | No public exploit | Uncontrolled search path in some Intel(R) XTU software before version 7.12.0.29 may allow an authenticated user to potentially enable escalation of privilege via local access. |
| CVE-2023-28396 | Medium | 2024-02-14 | Not applicable | No public exploit | Improper access control in firmware for some Intel(R) Thunderbol(TM) Controllers versions before 41 may allow a privileged user to enable denial of service via local access. |
| CVE-2023-28374 | Medium | 2024-02-14 | Not applicable | No public exploit | Improper input validation for some Intel(R) PROSet/Wireless and Intel(R) Killer(TM) Wi-Fi software before version 22.240 may allow an unauthenticated user to potentially enable denial of service via adjacent access. |
| CVE-2023-27517 | High | 2024-02-14 | Not applicable | No public exploit | Improper access control in some Intel(R) Optane(TM) PMem software before versions 01.00.00.3547, 02.00.00.3915, 03.00.00.0483 may allow an athenticated user to potentially enable escalation of privilege via local access. |
| CVE-2023-27308 | Medium | 2024-02-14 | Not applicable | No public exploit | Improper buffer restrictions in some Intel(R) Thunderbolt(TM) DCH drivers for Windows before version 88 may allow a privileged user to potentially enable escalation of privilege via local access. |
| CVE-2023-27307 | Low | 2024-02-14 | Not applicable | No public exploit | Improper buffer restrictions in some Intel(R) Thunderbolt(TM) DCH drivers for Windows before version 88 may allow an authenticated user to potentially enable information disclosure via local access. |
| CVE-2023-27303 | Low | 2024-02-14 | Not applicable | No public exploit | Improper access control in some Intel(R) Thunderbolt(TM) DCH drivers for Windows before version 88 may allow an authenticated user to potentially enable information disclosure via local access. |
| CVE-2023-27301 | Medium | 2024-02-14 | Not applicable | No public exploit | Improper access control in some Intel(R) Thunderbolt(TM) DCH drivers for Windows before version 88 may allow an authenticated user to potentially enable escalation of privilege via local access. |
| CVE-2023-27300 | Low | 2024-02-14 | Not applicable | No public exploit | Improper buffer restrictions in some Intel(R) Thunderbolt(TM) DCH drivers for Windows before version 88 may allow an authenticated user to potentially enable information disclosure via local access. |
| CVE-2023-26596 | Low | 2024-02-14 | Not applicable | No public exploit | Improper access control in some Intel(R) Thunderbolt(TM) DCH drivers for Windows before version 88 may allow an authenticated user to potentially enable denial of service via local access. |
| CVE-2023-26592 | Low | 2024-02-14 | Not applicable | No public exploit | Deserialization of untrusted data in some Intel(R) Thunderbolt(TM) DCH drivers for Windows before version 88 may allow an authenticated user to potentially enable a denial of service via local access. |
| CVE-2023-26591 | Low | 2024-02-14 | Not applicable | No public exploit | Unchecked return value in some Intel(R) Thunderbolt(TM) DCH drivers for Windows before version 88 may allow an unauthenticated user to potentially enable denial of service via physical access. |
| CVE-2023-26586 | Medium | 2024-02-14 | Not applicable | No public exploit | Uncaught exception for some Intel(R) PROSet/Wireless and Intel(R) Killer(TM) Wi-Fi software before version 22.240 may allow an unauthenticated user to potentially enable denial of service via adjacent access. |
| CVE-2023-26585 | Medium | 2024-02-14 | Not applicable | No public exploit | Improper access control in some Intel(R) Thunderbolt(TM) DCH drivers for Windows before version 88 may allow an authenticated user to potentially enable denial of service via local access. |
| CVE-2023-25951 | Medium | 2024-02-14 | Not applicable | No public exploit | Improper input validation for some Intel(R) PROSet/Wireless and Intel(R) Killer(TM) Wi-Fi software before version 22.240 may allow a privileged user to potentially enable escalation of privilege via local access. |
| CVE-2023-25945 | High | 2024-02-14 | Not applicable | No public exploit | Protection mechanism failure in some Intel(R) OFU software before version 14.1.31 may allow an authenticated user to potentially enable escalation of privilege via local access. |
| CVE-2023-25779 | Medium | 2024-02-14 | Not applicable | No public exploit | Uncontrolled search path element in some Intel(R) Thunderbolt(TM) DCH drivers for Windows before version 88 may allow an authenticated user to potentially enable escalation of privilege via local access. |
| CVE-2023-25777 | High | 2024-02-14 | Not applicable | No public exploit | Improper access control in some Intel(R) Thunderbolt(TM) DCH drivers for Windows before version 88 may allow an authenticated user to potentially enable escalation of privilege via local access. |
| CVE-2023-25769 | Medium | 2024-02-14 | Not applicable | No public exploit | Uncontrolled resource consumption in some Intel(R) Thunderbolt(TM) DCH drivers for Windows before version 88 may allow an authenticated user to potentially enable denial of service via local access. |
| CVE-2023-25174 | High | 2024-02-14 | Not applicable | No public exploit | Improper access control in some Intel(R) Chipset Driver Software before version 10.1.19444.8378 may allow an authenticated user to potentially enable escalation of privilege via local access. |
| CVE-2023-25073 | Medium | 2024-02-14 | Not applicable | No public exploit | Improper access control in some Intel(R) DSA software before version 23.4.33 may allow an authenticated user to potentially enable denial of service via local access. |
| CVE-2023-24591 | High | 2024-02-14 | Not applicable | No public exploit | Uncontrolled search path in some Intel(R) Binary Configuration Tool software before version 3.4.4 may allow an authenticated user to potentially enable escalation of privilege via local access. |
| CVE-2023-24589 | Medium | 2024-02-14 | Not applicable | No public exploit | Improper buffer restrictions in some Intel(R) Thunderbolt(TM) DCH drivers for Windows before version 88 may allow a privileged user to potentially enable escalation of privilege via local access. |
| CVE-2023-24542 | Medium | 2024-02-14 | Not applicable | No public exploit | Unquoted search path or element in some Intel(R) Thunderbolt(TM) DCH drivers for Windows before version 88 may allow an authenticated user to potentially enable escalation of privilege via local access. |