CVE Vulnerability Catalog

Protection mechanism failure for some Intel(R) Transfer Learning Tool before version v0.7 may allow an escalation of privilege. An unprivileged adversary with an unauthenticated user and low complexity attack may enable privilege escalation. This may occur via network access without user interaction. Impact on confidentiality, integrity, and availability is low.

A Use of Hard-coded Cryptographic Key vulnerability could result in a security feature bypass. A low-privileged attacker could bypass security measures and gain unauthorized read and write access. Exploitation does not require user interaction, and scope is changed.

Untrusted search path for some Intel(R) Performance Counter Monitor (Intel(R) PCM) before version tag 202604 may allow an escalation of privilege. An unprivileged adversary with an authenticated user and high complexity attack may enable privilege escalation. This may occur via local access and requires passive user interaction. Impact on confidentiality, integrity, and availability is high.

Path traversal vulnerability in gaudi-container-runtime before version 1.24.0 may allow privilege escalation. An attacker with an authenticated user and a low complexity attack can exploit this locally, requiring passive user interaction. The impact on confidentiality, integrity, and availability is high.

An Incorrect Authorization vulnerability could result in privilege escalation. A low-privileged attacker could gain unauthorized read and write access. Exploitation does not require user interaction.

Stack-based buffer overflow in Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 0: Kernel may allow denial of service. An unprivileged software adversary with an unauthenticated user and low complexity attack may enable DoS. This may occur via adjacent access without user interaction. Availability impact is high.

Improper buffer restrictions in Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 0: Kernel may allow denial of service. An unprivileged software adversary with an unauthenticated user and low complexity attack may enable DoS. This may occur via adjacent access without user interaction. Integrity impact is low, availability high.

An Improper Input Validation vulnerability could result in a security feature bypass. An attacker could bypass security measures and gain unauthorized read and limited write access. Exploitation does not require user interaction.

An Improper Input Validation vulnerability could result in privilege escalation. A low-privileged attacker could gain unauthorized read and write access. Exploitation requires user interaction – the victim must open a malicious file. Scope is changed.

Improper access control in the firmware for Alias Checking Trusted Module for some Intel(R) Xeon(R) processors may allow privilege escalation. A privileged user with a high complexity attack may enable escalation. This may occur via local access without user interaction. Confidentiality and integrity impact are high.

Improper authentication in Intel(R) PROSet/Wireless WiFi Software for Windows may allow an escalation of privilege. An unprivileged attacker with an unauthenticated user and a low complexity attack may enable local code execution. The attack requires local access, no user interaction, and may impact confidentiality, integrity, and availability.

Improper privilege management in Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 2: Privileged Process may allow privilege escalation. An unprivileged software adversary with an unauthenticated user and high complexity attack may enable escalation. This may occur via local access without user interaction. Confidentiality and integrity impact are low, availability high.

Out-of-bounds write in Intel(R) PROSet/Wireless WiFi Software for Windows may allow a denial of service. An attacker with an unauthenticated user and a low complexity attack may cause a denial of service. The attack requires adjacent access, passive user interaction, and may impact availability.

Improper authentication in the Intel(R) TDX module for some Intel platforms within Ring 0: Trust Domain may allow information disclosure and privilege escalation. A privileged user with a high complexity attack may enable escalation. This may occur via local access without user interaction. Confidentiality and integrity impact are high, availability low.

Null pointer dereference in Intel PROSet/Wireless WiFi drivers for Windows may lead to denial of service. The attack requires network access and low complexity, with no user interaction. The impact on system availability is high.

Untrusted search path in Battery Life Diagnostic Tool software before version 2.9.0 may allow an escalation of privilege. An attacker with an authenticated user and a high complexity attack may enable privilege escalation. The attack requires local access, passive user interaction, and may impact confidentiality, integrity, and availability.

Improper buffer restrictions in Intel PROSet/Wireless WiFi drivers for Windows may lead to denial of service. The attack requires network access and low complexity, with no user interaction. The impact on system availability is high.

Improper access control in Intel PROSet/Wireless WiFi drivers for Windows may allow privilege escalation. The attack requires local access and low complexity, with no user interaction. The impact on confidentiality, integrity, and availability is low, low, and high, respectively.

Null pointer dereference in Intel PROSet/Wireless WiFi drivers for Windows may lead to denial of service. The attack requires network access and low complexity, with no user interaction. The impact on system availability is high.

Improper conditions check in Intel PROSet/Wireless WiFi drivers may lead to denial of service. The attack requires network access and low complexity, with no user interaction. The impact on system availability is high.