Improper input validation for some Intel(R) Xeon(R) processors within firmware may allow an escalation of privilege. Startup code and smm adversary with a privileged user combined with a high complexity attack may enable data alteration. This result may potentially occur via loca...
Vendor
intel vulnerabilities
1,910 published CVES affecting intel, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).
- Total
- 1,910
- Critical
- 64
- High
- 838
- Medium
- 959
- Low
- 49
- Unscored
- 0
- CISA KEV
- 4
Products
- graphics driver 64
- active management technology firmware 54
- prosetwireless wifi 52
- converged security management engine firmware 45
- core i7-10710u firmware 43
- quartus prime 43
- core i7-10510u firmware 42
- core i7-10510y firmware 42
- core i7-8665u firmware 42
- core i9-9900k firmware 42
- core i7-8565u firmware 41
- core i7-8650u firmware 41
- core i7-8706g firmware 41
- core i9-9880h firmware 41
- core i7-8500y firmware 40
- core i7-8700 firmware 40
- core i7-8700k firmware 40
- core i7-8700t firmware 40
- core i7-9700k firmware 40
- killer wi-fi 6e ax1675 firmware 40
- proset wi-fi 6e ax210 firmware 40
- core i7-1065g7 firmware 39
- core i7-8550u firmware 39
- core i7-8705g firmware 39
- core i7-8709g firmware 39
- core i7-8750h firmware 39
- core i7-8809g firmware 39
- core i7-8850h firmware 39
- core i7-9850h firmware 39
- core i9-9900kf firmware 39
Latest intel CVEs
Newest publication first · page 1 of 40 · showing the latest 1,000
-
MediumCVSS 4.0 EPSS 0.10%
-
MediumCVSS 6.3 EPSS 0.33%
Protection mechanism failure for some Intel(R) Transfer Learning Tool before version v0.7 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an unauthenticated user combined with a low complexity attack may enable escalatio...
-
MediumCVSS 4.3 EPSS 0.10%
Omission of security-relevant information for some Intel(R) Software Guard Extensions Data Center Attestation Primitives within Ring 0: Kernel may allow a denial of service. Authorized adversary with a privileged user combined with a high complexity attack may enable data alterat...
-
MediumCVSS 4.6 EPSS 0.26%
Deserialization of untrusted data for some Intel(R) Extension for PyTorch before version 2.8.0 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an unauthenticated user combined with a low complexity attack may enable esca...
-
MediumCVSS 5.4 EPSS 0.16%
Uncontrolled search path for some Hardware-Aware-Automated-MachineLearning NA before version 45cd723 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with a privileged user combined with a low complexity attack may enable esca...
-
MediumCVSS 5.4 EPSS 0.12%
Untrusted search path for some Intel(R) Performance Counter Monitor (Intel(R) PCM) before version tag 202604 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a high complexity attack ma...
-
MediumCVSS 5.4 EPSS 0.16%
Uncontrolled search path for some Approximate Bayesian Inference Framework before version on commit #484c949 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with a privileged user combined with a low complexity attack may ena...
-
MediumCVSS 5.4 EPSS 0.16%
Path traversal for some gaudi-container-runtime before version 1.24.0 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable escalation of privilege. This r...
-
HighCVSS 7.0 EPSS 0.10%
Improper handling of overlap between protected memory ranges for some Intel(R) Xeon(R) 6 processors when using Intel(R) TDX within SMM may allow an escalation of privilege. SMM adversary with a privileged user combined with a high complexity attack may enable escalation of privil...
-
MediumCVSS 5.4 EPSS 0.12%
Protection mechanism failure for some Intel(R) Workload Services Framework software within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with a privileged user combined with a low complexity attack may enable escalation of privile...
-
MediumCVSS 6.8 EPSS 0.11%
Improper input validation for some vLLM Hardware Plugin for Intel(R) Gaudi(R) software before version 0.16.0 within Ring 3: User Applications may allow a denial of service. Authorized adversary with an authenticated user combined with a low complexity attack may enable denial of...
-
HighCVSS 8.3 EPSS 0.55%
Stack-based buffer overflow for some Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 0: Kernel may allow a denial of service. Unprivileged software adversary with an unauthenticated user combined with a low complexity attack may enable denial of service. This resul...
-
MediumCVSS 5.4 EPSS 0.12%
Protection mechanism failure for some Intel(R) oneCCL Bindings for PyTorch before version v2.8.0 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with a privileged user combined with a low complexity attack may enable escalati...
-
MediumCVSS 5.9 EPSS 0.13%
Use after free for some Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 0: Kernel may allow a denial of service. System software adversary with an unauthenticated user combined with a high complexity attack may enable denial of service. This result may potentially...
-
HighCVSS 8.3 EPSS 0.27%
Improper buffer restrictions for some Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 0: Kernel may allow a denial of service. Unprivileged software adversary with an unauthenticated user combined with a low complexity attack may enable denial of service. This resu...
-
MediumCVSS 5.4 EPSS 0.16%
Protection mechanism failure for some Intel(R) AI Reference Models before version v3.4.1 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with a privileged user combined with a low complexity attack may enable escalation of pr...
-
MediumCVSS 6.9 EPSS 0.11%
Heap-based buffer overflow for the Intel(R) Open Volume Kernel Library (Intel(R) Open VKL) library maintained by intel(R) before version 2.0.2 within Ring 3: User Applications may allow a denial of service. System software adversary with an authenticated user combined with a low...
-
MediumCVSS 5.4 EPSS 0.15%
Protection mechanism failure for some Intel(R) LLM Library for PyTorch within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with a privileged user combined with a low complexity attack may enable escalation of privilege. This resu...
-
MediumCVSS 4.8 EPSS 0.14%
Improper input validation for some Intel(R) Neural Compressor software before version v3.7 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable escalation...
-
MediumCVSS 5.8 EPSS 0.07%
Time-of-check time-of-use race condition for the Intel(R) NPU Driver for Windows for all versions within Ring 1: Device Drivers may allow a denial of service. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable denial of se...
-
MediumCVSS 5.4 EPSS 0.16%
Protection mechanism failure for some Intel(R) Neural Compressor software before version v3.6 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with a privileged user combined with a low complexity attack may enable escalation...
-
MediumCVSS 5.4 EPSS 0.16%
Protection mechanism failure for some Intel(R) AI Containers before version v0.4.0 within Ring 3: User Applications may allow an escalation of privilege. System software adversary with a privileged user combined with a low complexity attack may enable escalation of privilege. Thi...
-
HighCVSS 8.5 EPSS 0.13%
Improper access control in the firmware for some in Alias Checking Trusted Module for some Intel(R) Xeon(R) processors may allow an escalation of privilege. Startup code and SMM adversary with a privileged user combined with a high complexity attack may enable escalation of privi...
-
MediumCVSS 6.3 EPSS 0.17%
Improper authentication for some Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 2: Device Drivers may allow an escalation of privilege. Unprivileged software adversary with an unauthenticated user combined with a low complexity attack may enable local code executi...
-
HighCVSS 7.1 EPSS 0.13%
Improper privilege management for some Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 2: Privileged Process may allow an escalation of privilege. Unprivileged software adversary with an unauthenticated user combined with a high complexity attack may enable escalat...
Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.