Read the docs

Intel

Records1856All Threatist records
Exploited (KEV)4In CISA KEV
CVSS critical64CVSS 9.0–10.0
CVSS high872CVSS 7.0–8.9

Exploited now

Intel records in CISA KEV

Components

Products in the NVD configurations · select one to filter the records

Records

24 records in Driver & Support Assistant · all components

TI-2023-12240 CVE-2023-27515 · GHSA-9j9m-r78f-xqm8

Cross-site scripting in Intel DSA software

Priority MEDIUM 44

Cross-site scripting (XSS) for the Intel(R) DSA software before version 23.1.9 may allow unauthenticated user to potentially enable escalation of privilege via network access.

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.0057 Published 2023-08-11 No fix listed CWE-79
Priority LOW 39

Improper access control in some Intel(R) DSA software before version 23.4.33 may allow an authenticated user to potentially enable escalation of privilege via local access.

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.00199 Published 2024-02-14 No fix listed CWE-284
Priority LOW 36

Intel Driver & Support Assistant Link Following Local Privilege Escalation Vulnerability.

CVSS 3.0HIGH 7.8 Local Low privileges No interaction EPSS 0.00246 Published 2024-05-03 No fix listed CWE-59
Priority LOW 36

Intel Driver & Support Assistant Link Following Local Privilege Escalation Vulnerability.

CVSS 3.0HIGH 7.8 Local Low privileges No interaction EPSS 0.00329 Published 2024-05-03 No fix listed CWE-59
TI-2022-14308 CVE-2022-32764 · GHSA-x7h3-m8g6-g33g

Race condition in Intel DSA software

Priority LOW 34

Description: Race condition in the Intel(R) DSA software before version 22.4.26 may allow an authenticated user to potentially enable escalation of privilege via local access.

CVSS 3.1HIGH 7.5 Local Low privileges User interaction EPSS 0.00127 Published 2023-02-16 No fix listed CWE-362
TI-2021-00048 CVE-2021-0094 · GHSA-8jj4-2q63-pfr7

Link following in Intel DSA

Priority LOW 34

Improper link resolution before file access in Intel(R) DSA before version 20.11.50.9 may allow an authenticated user to potentially enable an escalation of privilege via local access.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00284 Published 2021-06-09 No fix listed CWE-59
Priority LOW 34

Improper permissions in the Intel(R) Driver & Support Assistant before version 20.7.26.7 may allow an authenticated user to potentially enable escalation of privilege via local access.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00282 Published 2020-10-05 No fix listed CWE-732
Priority LOW 34

Privilege escalation in file permissions in Intel Driver and Support Assistant before 3.5.0.1 may allow an authenticated user to potentially execute code as administrator via local access.

CVSS 3.0HIGH 7.8 Local Low privileges No interaction EPSS 0.00347 Published 2018-09-12 Fixed in 3.5.0.1. CWE-732
Priority LOW 33

Uncontrolled search path in some Intel(R) DSA software uninstallers before version 23.4.39.10 may allow an authenticated user to potentially enable escalation of privilege via local access.

CVSS 3.1HIGH 7.3 Local Low privileges User interaction EPSS 0.00209 Published 2024-05-16 No fix listed CWE-427
TI-2021-00044 CVE-2021-0090 · GHSA-mm8x-4c8c-wh5g

Uncontrolled search path in Intel DSA

Priority LOW 32

Uncontrolled search path element in Intel(R) DSA before version 20.11.50.9 may allow an authenticated user to potentially enable an escalation of privilege via local access.

CVSS 3.1HIGH 7.3 Local Low privileges User interaction EPSS 0.00291 Published 2021-06-09 No fix listed CWE-427
Priority LOW 31

Improper access control in some Intel(R) DSA software before version 23.4.33 may allow a privileged user to potentially enable escalation of privilege via local access.

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.00181 Published 2024-02-14 No fix listed CWE-284
Priority LOW 27

SEMA driver in Intel Driver and Support Assistant before version 3.1.1 allows a local attacker the ability to read and writing to Memory Status registers potentially allowing information disclosure or a denial of service…

CVSS 3.0MEDIUM 6.0 Local High privileges No interaction EPSS 0.00307 Published 2018-01-09 Fixed in 3.1.1 CWE-119
TI-2024-24265 CVE-2024-36488 · GHSA-xf5m-j333-gw96

Improper access control in Intel DSA

Priority LOW 26

Improper Access Control in some Intel(R) DSA before version 24.3.26.8 may allow an authenticated user to potentially enable escalation of privilege via local access.

CVSS 4.0MEDIUM 5.4 Local Low privileges User interaction EPSS 0.00162 Published 2024-11-13 No fix listed CWE-284
Priority LOW 26

Improper access control in some Intel(R) DSA software before version 23.4.33 may allow an authenticated user to potentially enable denial of service via local access.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00184 Published 2024-02-14 No fix listed CWE-284
Priority LOW 25

Insecure inherited permissions for some Intel(R) DSA software before version 24.3.26.8 may allow an authenticated user to potentially enable escalation of privilege via local access.

CVSS 4.0MEDIUM 5.4 Local Low privileges User interaction EPSS 0.00139 Published 2024-11-13 No fix listed CWE-277
TI-2020-14994 CVE-2020-24460 · GHSA-cwc3-vmx9-g772

Incorrect default permissions in Intel DSA

Priority LOW 24

Incorrect default permissions in the Intel(R) DSA before version 20.8.30.6 may allow an authenticated user to potentially enable denial of service via local access.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00247 Published 2020-11-12 No fix listed CWE-276
Priority LOW 22

Race condition in the Intel(R) Driver and Support Assistant before version 20.1.5 may allow an authenticated user to potentially enable denial of service via local access.

CVSS 3.1MEDIUM 4.7 Local Low privileges No interaction EPSS 0.00356 Published 2020-04-15 No fix listed CWE-362
Priority LOW 20

Insufficient input validation in Intel(R) Driver & Support Assistant version 19.3.12.3 and before may allow a privileged user to potentially enable denial of service via local access.

CVSS 3.0MEDIUM 4.4 Local High privileges No interaction EPSS 0.00334 Published 2019-05-17 No fix listed CWE-20
Open these records in search →