Intel

Records1856All Threatist records

Exploited (KEV)4In CISA KEV

CVSS critical64CVSS 9.0–10.0

CVSS high872CVSS 7.0–8.9

Exploited now

Intel records in CISA KEV

TI-2021-20393 Apache Log4j2 Deserialization of Untrusted Data Vulnerability CRITICAL 98KEV 2023-05-01 TI-2015-02024 Intel Ethernet Diagnostics Driver for Windows Denial-of-Service Vulnerability CRITICAL 91KEV 2023-02-10 TI-2017-03684 Intel Active Management Technology (AMT), Small Business Technology (SBT), and Standard Manageability Privilege Escalation Vulnerability CRITICAL 100KEV 2022-01-28 TI-2021-19919 Apache Log4j2 Remote Code Execution Vulnerability CRITICAL 100KEV 2021-12-10

Components

Products in the NVD configurations · select one to filter the records

Graphics Driver 63 records LOW Active Management Technology Firmware 54 records CRITICAL Proset/wireless Wifi 52 records MEDIUM Converged Security Management Engine Firmware 44 records MEDIUM Core I7-10710u Firmware 43 records MEDIUM Quartus Prime 43 records MEDIUM Core I7-10510u Firmware 42 records MEDIUM Core I7-10510y Firmware 42 records MEDIUM

Records

11 records in Sgx Sdk · all components

TI-2022-05529 CVE-2022-21123 · GHSA-4jx7-c67v-r2v7

Incomplete cleanup of multi-core shared buffers for some Intel(R) Processors may allow an…

LOW 35

Incomplete cleanup of multi-core shared buffers for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.0687 Published 2022-06-15 Partial fix CWE-459

TI-2022-05567 CVE-2022-21166

Incomplete cleanup in specific special register write operations for some Intel(R)…

LOW 34

Incomplete cleanup in specific special register write operations for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.06451 Published 2022-06-15 Partial fix CWE-459

TI-2022-05531 CVE-2022-21125 · GHSA-wwff-24hj-g6pw

Incomplete cleanup of microarchitectural fill buffers on some Intel(R) Processors may…

LOW 34

Incomplete cleanup of microarchitectural fill buffers on some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.06451 Published 2022-06-15 Partial fix CWE-459

TI-2022-05533 CVE-2022-21127 · GHSA-q9qj-gqmf-73c2

Incomplete cleanup in specific special register read operations for some Intel(R)…

LOW 33

Incomplete cleanup in specific special register read operations for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.0551 Published 2022-06-15 Partial fix CWE-459

TI-2018-12862 CVE-2018-18098 · GHSA-j74m-28jp-478w

Incorrect permission assignment in Intel SGX SDK and Platform Software for Windows

LOW 32

Improper file verification in install routine for Intel(R) SGX SDK and Platform Software for Windows before 2.2.100 may allow an escalation of privilege via local access.

CVSS 3.0HIGH 7.3 Local Low privileges User interaction EPSS 0.00278 Published 2019-01-10 Fixed in 2.2.100. CWE-732

TI-2021-00125 CVE-2021-0186 · GHSA-5mqc-gjcv-wj5w

Improper input validation in Intel SGX SDK applications compiled for SGX2 enabled…

LOW 30

Improper input validation in the Intel(R) SGX SDK applications compiled for SGX2 enabled processors may allow a privileged user to potentially escalation of privilege via local access.

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.0033 Published 2021-11-17 No fix listed CWE-20

TI-2022-10088 CVE-2022-26841 · GHSA-55cg-v6gq-m3wm

Insufficient control flow management for the Intel(R) SGX SDK software for Linux before…

LOW 24

Insufficient control flow management for the Intel(R) SGX SDK software for Linux before version 2.16.100.1 may allow an authenticated user to potentially enable information disclosure via local access.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00158 Published 2023-02-16 No fix listed

TI-2022-09850 CVE-2022-26509 · GHSA-9ppj-rc3q-j6g2

Improper handling of exceptional conditions in Intel SGX SDK software

LOW 24

Improper conditions check in the Intel(R) SGX SDK software may allow a privileged user to potentially enable information disclosure via local access.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00157 Published 2023-02-16 No fix listed CWE-755

TI-2022-10514 CVE-2022-27499 · GHSA-vc86-73mc-m266

Premature release of resource during expected lifetime in the Intel(R) SGX SDK software…

LOW 21

Premature release of resource during expected lifetime in the Intel(R) SGX SDK software may allow a privileged user to potentially enable information disclosure via local access.

CVSS 3.1MEDIUM 4.4 Local High privileges No interaction EPSS 0.00423 Published 2022-11-11 No fix listed CWE-672

TI-2021-00001 CVE-2021-0001 · GHSA-78jj-chhm-hm82

Observable discrepancy in Intel IPP

LOW 21

Observable timing discrepancy in Intel(R) IPP before version 2020 update 1 may allow authorized user to potentially enable information disclosure via local access.

CVSS 3.1MEDIUM 4.7 Local Low privileges No interaction EPSS 0.00209 Published 2021-06-09 No fix listed CWE-203

TI-2018-02656 CVE-2018-3626 · GHSA-r3g2-wgg9-9346

Information disclosure in Intel SGX SDK

LOW 21

Edger8r tool in the Intel SGX SDK before version 2.1.2 (Linux) and 1.9.6 (Windows) may generate code that is susceptible to a side channel potentially allowing a local user to access unauthorized information.

CVSS 3.0MEDIUM 4.7 Local Low privileges No interaction EPSS 0.00283 Published 2018-03-20 No fix listed CWE-200

Open these records in search →