CVE Feed

    Dashboard / CVE

    5.4
    Medium

    CVE-2022-44610

    Last Modified: 24 Jan 2025

    Improper authentication in the Intel(R) DCM software before version 5.1 may allow an authenticated user to potentially enable escalation of privilege via network access.

    Published: 10 May 2023
    5.4
    Medium

    CVE-2022-41979

    Last Modified: 24 Jan 2025

    Protection mechanism failure in the Intel(R) DCM software before version 5.1 may allow an authenticated user to potentially enable escalation of privilege via network access.

    Published: 10 May 2023
    6
    Medium

    CVE-2022-43475

    Last Modified: 27 Jan 2025

    Insecure storage of sensitive information in the Intel(R) DCM software before version 5.1 may allow an authenticated user to potentially enable escalation of privilege via local access.

    Published: 10 May 2023
    6.7
    Medium

    CVE-2022-41998

    Last Modified: 27 Jan 2025

    Uncontrolled search path in the Intel(R) DCM software before version 5.1 may allow an authenticated user to potentially enable escalation of privilege via local access.

    Published: 10 May 2023
    8.2
    High

    CVE-2022-44619

    Last Modified: 27 Jan 2025

    Insecure storage of sensitive information in the Intel(R) DCM software before version 5.1 may allow an authenticated user to potentially enable escalation of privilege via local access.

    Published: 10 May 2023
    7.2
    High

    CVE-2022-42465

    Last Modified: 27 Jan 2025

    Improper access control in kernel mode driver for the Intel(R) OFU software before version 14.1.30 may allow a privileged user to potentially enable escalation of privilege via local access.

    Published: 10 May 2023
    8.8
    High

    CVE-2022-41784

    Last Modified: 27 Jan 2025

    Improper access control in kernel mode driver for the Intel(R) OFU software before version 14.1.30 may allow an authenticated user to potentially enable escalation of privilege via local access

    Published: 10 May 2023
    8.2
    High

    CVE-2022-40207

    Last Modified: 27 Jan 2025

    Improper access control in the Intel(R) SUR software before version 2.4.8989 may allow an authenticated user to potentially enable escalation of privilege via local access.

    Published: 10 May 2023
    6.5
    Medium

    CVE-2022-40685

    Last Modified: 27 Jan 2025

    Insufficiently protected credentials in the Intel(R) DCM software before version 5.0.1 may allow an authenticated user to potentially enable information disclosure via network access.

    Published: 10 May 2023
    6.8
    Medium

    CVE-2022-40210

    Last Modified: 27 Jan 2025

    Exposure of data element to wrong session in the Intel DCM software before version 5.0.1 may allow an authenticated user to potentially enable escalation of privilege via local access.

    Published: 10 May 2023
    6
    Medium

    CVE-2023-22443

    Last Modified: 27 Jan 2025

    Integer overflow in some Intel(R) Server Board BMC firmware before version 2.90 may allow a privileged user to enable denial of service via local access.

    Published: 10 May 2023
    6
    Medium

    CVE-2023-24475

    Last Modified: 27 Jan 2025

    Out of bounds read in some Intel(R) Server Board BMC firmware before version 2.90 may allow a privileged user to enable information disclosure via local access.

    Published: 10 May 2023
    6.1
    Medium

    CVE-2023-25175

    Last Modified: 27 Jan 2025

    Improper input validation in some Intel(R) Server Board BMC firmware before version 2.90 may allow a privileged user to enable information disclosure via local access.

    Published: 10 May 2023
    6.3
    Medium

    CVE-2023-28411

    Last Modified: 27 Jan 2025

    Double free in some Intel(R) Server Board BMC firmware before version 2.90 may allow a privileged user to enable information disclosure via local access.

    Published: 10 May 2023
    6.3
    Medium

    CVE-2023-25776

    Last Modified: 27 Jan 2025

    Improper input validation in some Intel(R) Server Board BMC firmware before version 2.90 may allow a privileged user to enable information disclosure via local access.

    Published: 10 May 2023
    6.7
    Medium

    CVE-2023-22379

    Last Modified: 27 Jan 2025

    Improper input validation in some Intel(R) Server Board BMC firmware before version 2.90 may allow a privileged user to enable information disclosure via local access.

    Published: 10 May 2023
    7.9
    High

    CVE-2023-22442

    Last Modified: 27 Jan 2025

    Out of bounds write in some Intel(R) Server Board BMC firmware before version 2.90 may allow a privileged user to enable escalation of privilege via local access.

    Published: 10 May 2023
    8.2
    High

    CVE-2023-25545

    Last Modified: 27 Jan 2025

    Improper buffer restrictions in some Intel(R) Server Board BMC firmware before version 2.90 may allow a privileged user to enable escalation of privilege via local access.

    Published: 10 May 2023
    8.2
    High

    CVE-2023-22297

    Last Modified: 27 Jan 2025

    Access of memory location after end of buffer in some Intel(R) Server Board BMC firmware before version 2.90 may allow a privileged user to enable escalation of privilege via local access.

    Published: 10 May 2023
    8.2
    High

    CVE-2023-22661

    Last Modified: 27 Jan 2025

    Buffer overflow in some Intel(R) Server Board BMC firmware before version 2.90 may allow a privileged user to enable escalation of privilege via local access.

    Published: 10 May 2023
    5.7
    Medium

    CVE-2022-38787

    Last Modified: 27 Jan 2025

    Improper input validation in firmware for some Intel(R) FPGA products before version 2.7.0 Hotfix may allow an authenticated user to potentially enable escalation of privilege via local access.

    Published: 10 May 2023
    6.7
    Medium

    CVE-2022-38103

    Last Modified: 27 Jan 2025

    Insecure inherited permissions in the Intel(R) NUC Software Studio Service installer before version 1.17.38.0 may allow an authenticated user to potentially enable escalation of privilege via local access

    Published: 10 May 2023
    5
    Medium

    CVE-2022-46279

    Last Modified: 27 Jan 2025

    Improper access control in the Intel(R) Retail Edge android application before version 3.0.301126-RELEASE may allow an authenticated user to potentially enable information disclosure via local access.

    Published: 10 May 2023
    7.1
    High

    CVE-2022-41690

    Last Modified: 27 Jan 2025

    Improper access control in the Intel(R) Retail Edge Mobile iOS application before version 3.4.7 may allow an authenticated user to potentially enable escalation of privilege via local access.

    Published: 10 May 2023
    6.7
    Medium

    CVE-2022-32578

    Last Modified: 27 Jan 2025

    Improper access control for the Intel(R) NUC Pro Software Suite before version 2.0.0.3 may allow an authenticated user to potentially enable escalation of privilege via local access.

    Published: 10 May 2023
    6.7
    Medium

    CVE-2022-34855

    Last Modified: 27 Jan 2025

    Path traversal for the Intel(R) NUC Pro Software Suite before version 2.0.0.3 may allow an authenticated user to potentially enable escalation of privilege via local access.

    Published: 10 May 2023
    6.7
    Medium

    CVE-2022-34848

    Last Modified: 27 Jan 2025

    Uncontrolled search path for the Intel(R) NUC Pro Software Suite before version 2.0.0.3 may allow an authenticated user to potentially enable escalation of privilege via local access.

    Published: 10 May 2023
    6.7
    Medium

    CVE-2022-36391

    Last Modified: 27 Jan 2025

    Incorrect default permissions for the Intel(R) NUC Pro Software Suite before version 2.0.0.3 may allow an authenticated user to potentially enable escalation of privilege via local access.

    Published: 10 May 2023
    6.7
    Medium

    CVE-2022-46656

    Last Modified: 27 Jan 2025

    Insecure inherited permissions for the Intel(R) NUC Pro Software Suite before version 2.0.0.3 may allow an authenticated user to potentially enable escalation of privilege via local access.

    Published: 10 May 2023
    6.7
    Medium

    CVE-2022-21162

    Last Modified: 27 Jan 2025

    Uncontrolled search path for the Intel(R) HDMI Firmware Update tool for NUC before version 1.79.1.1 may allow an authenticated user to potentially enable escalation of privilege via local access.

    Published: 10 May 2023
    6.7
    Medium

    CVE-2022-40971

    Last Modified: 27 Jan 2025

    Incorrect default permissions for the Intel(R) HDMI Firmware Update Tool for NUC before version 1.79.1.1 may allow an authenticated user to potentially enable escalation of privilege via local access.

    Published: 10 May 2023
    5.6
    Medium

    CVE-2022-21239

    Last Modified: 27 Jan 2025

    Out-of-bounds read in software for the Intel QAT Driver for Windows before version 1.9.0-0008 may allow an authenticated user to potentially enable information disclosure via local access.

    Published: 10 May 2023
    8.4
    High

    CVE-2022-21804

    Last Modified: 27 Jan 2025

    Out-of-bounds write in software for the Intel QAT Driver for Windows before version 1.9.0-0008 may allow an authenticated user to potentially enable escalation of privilege via local access.

    Published: 10 May 2023
    1.8
    Low

    CVE-2022-40974

    Last Modified: 27 Jan 2025

    Incomplete cleanup in the Intel(R) IPP Cryptography software before version 2021.6 may allow a privileged user to potentially enable information disclosure via local access.

    Published: 10 May 2023
    4.7
    Medium

    CVE-2022-41646

    Last Modified: 27 Jan 2025

    Insufficient control flow management in the Intel(R) IPP Cryptography software before version 2021.6 may allow an unauthenticated user to potentially enable information disclosure via local access.

    Published: 10 May 2023
    4.7
    Medium

    CVE-2022-37409

    Last Modified: 27 Jan 2025

    Insufficient control flow management for the Intel(R) IPP Cryptography software before version 2021.6 may allow an authenticated user to potentially enable information disclosure via local access.

    Published: 10 May 2023
    5.5
    Medium

    CVE-2022-25976

    Last Modified: 27 Jan 2025

    Improper input validation in the Intel(R) VROC software before version 7.7.6.1003 may allow an authenticated user to potentially enable denial of service via local access.

    Published: 10 May 2023
    6.3
    Medium

    CVE-2022-29508

    Last Modified: 27 Jan 2025

    Null pointer dereference in the Intel(R) VROC software before version 7.7.6.1003 may allow an authenticated user to potentially enable escalation of privilege via local access.

    Published: 10 May 2023
    6.7
    Medium

    CVE-2022-30338

    Last Modified: 27 Jan 2025

    Incorrect default permissions in the Intel(R) VROC software before version 7.7.6.1003 may allow an authenticated user to potentially enable escalation of privilege via local access.

    Published: 10 May 2023
    7.8
    High

    CVE-2022-29919

    Last Modified: 27 Jan 2025

    Use after free in the Intel(R) VROC software before version 7.7.6.1003 may allow an authenticated user to potentially enable escalation of privilege via local access.

    Published: 10 May 2023
    3.4
    Low

    CVE-2022-32577

    Last Modified: 27 Jan 2025

    Improper input validation in BIOS Firmware for some Intel(R) NUC Kits before version PY0081 may allow a privileged user to potentially enable information disclosure or denial of service via local access

    Published: 10 May 2023
    4
    Medium

    CVE-2022-31477

    Last Modified: 27 Jan 2025

    Improper initialization for some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable information disclosure via local access.

    Published: 10 May 2023
    5.3
    Medium

    CVE-2022-32582

    Last Modified: 27 Jan 2025

    Improper access control in firmware for some Intel(R) NUC Boards, Intel(R) NUC 11 Performance Kit, Intel(R) NUC 11 Performance Mini PC, Intel(R) NUC Pro Compute Element may allow a privileged user to potentially enable denial of service via local access.

    Published: 10 May 2023
    5.8
    Medium

    CVE-2023-25771

    Last Modified: 27 Jan 2025

    Improper access control for some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable denial of service via local access.

    Published: 10 May 2023
    6.1
    Medium

    CVE-2022-37327

    Last Modified: 27 Jan 2025

    Improper input validation in BIOS firmware for Intel(R) NUC, Intel(R) NUC Performance Kit, Intel(R) NUC Performance Mini PC, Intel(R) NUC 8 Compute Element, Intel(R) NUC Pro Kit, Intel(R) NUC Pro Board, Intel(R) NUC 11 Compute Element, Intel(R) NUC 12 Compute Element, Intel(R) NUC Extreme, Intel(R) NUC 12 Extreme Compute Element, Intel(R) NUC Laptop Kit, Intel(R) NUC Enthusiast, Intel(R) NUC Essential, Intel(R) NUC Laptop Kit, Intel(R) NUC Extreme Compute Element, Intel(R) NUC Boards, Intel(R) NUC Pro Compute Element, Intel(R) NUC Rugged may allow a privileged user to enable information disclosure via local access.

    Published: 10 May 2023
    7.2
    High

    CVE-2022-32766

    Last Modified: 27 Jan 2025

    Improper input validation for some Intel(R) BIOS firmware may allow a privileged user to potentially enable escalation of privilege via local access.

    Published: 10 May 2023
    7.2
    High

    CVE-2023-22312

    Last Modified: 27 Jan 2025

    Improper access control for some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable escalation of privilege via local access.

    Published: 10 May 2023
    7.5
    High

    CVE-2022-28699

    Last Modified: 27 Jan 2025

    Improper input validation for some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable escalation of privilege via local access.

    Published: 10 May 2023
    7.5
    High

    CVE-2022-34147

    Last Modified: 27 Jan 2025

    Improper input validation in BIOS firmware for some Intel(R) NUC 9 Extreme Laptop Kits, Intel(R) NUC Performance Kits, Intel(R) NUC Performance Mini PC, Intel(R) NUC 8 Compute Element, Intel(R) NUC Pro Kit, Intel(R) NUC Pro Board, and Intel(R) NUC Compute Element may allow a privileged user to potentially enable escalation of privilege via local access.

    Published: 10 May 2023
    7.5
    High

    CVE-2022-36339

    Last Modified: 27 Jan 2025

    Improper input validation in firmware for Intel(R) NUC 8 Compute Element, Intel(R) NUC 11 Compute Element, Intel(R) NUC 12 Compute Element may allow a privileged user to enable escalation of privilege via local access.

    Published: 10 May 2023