Browse CVEs

HIGH 7.8 CVE-2018-3612 Intel NUC kits with insufficient input validation in system firmware, potentially allows a local attacker to elevate privileges to System Management … Bios Mitigation only Fix from $1,9502018-05-10 HIGH 7.8 CVE-2018-3649 DLL injection vulnerability in the installation executables (Autorun.exe and Setup.exe) for Intel's wireless drivers and related software in Intel Du… Dual Band Wireless Ac 3160 20.20.2.2+ Fix from $1,9502018-05-10 HIGH 8.3 CVE-2018-3624 Buffer overflow in ETWS processing module Intel XMM71xx, XMM72xx, XMM73xx, XMM74xx and Sofia 3G/R allows remote attacker to potentially execute arbit… 2g Modem Firmware Mitigation only Fix from $1,9502018-04-05 CRITICAL 9.8 CVE-2018-3641 Escalation of privilege in all versions of the Intel Remote Keyboard allows a network attacker to inject keystrokes as a local user. Remote Keyboard Mobile App Mitigation only Fix from $2,3002018-04-03 HIGH 7.8 CVE-2018-3638 Escalation of privilege in all versions of the Intel Remote Keyboard allows an authorized local attacker to execute arbitrary code as a privileged us… Remote Keyboard Mobile App Mitigation only Fix from $1,9502018-04-03 HIGH 7.8 CVE-2018-3645 Escalation of privilege in all versions of the Intel Remote Keyboard allows a local attacker to inject keystrokes into another remote keyboard sessio… Remote Keyboard Mobile App Mitigation only Fix from $1,9502018-04-03 MEDIUM 6.0 CVE-2017-5703 Configuration of SPI Flash in platforms based on multiple Intel platforms allow a local attacker to alter the behavior of the SPI flash potentially l… Core I7 8550u Mitigation only Fix from $1,6002018-04-03 MEDIUM 5.5 CVE-2018-3689 AESM daemon in Intel Software Guard Extensions Platform Software Component for Linux before 2.1.102 can effectively be disabled by a local attacker c… Software Guard Extensions Mitigation only Fix from $1,6002018-04-03 MEDIUM 5.6 CVE-2018-9056 Systems with microprocessors utilizing speculative execution may allow unauthorized disclosure of information to an attacker with local user access v… Atom C No fix yet Fix from $1,6002018-03-27 MEDIUM 5.5 CVE-2014-2312 The main function in android_main.cpp in thermald allows local users to write to arbitrary files via a symlink attack on /tmp/thermald.pid. Thermald 1.8+ Fix from $1,6002018-03-26 HIGH 8.8 CVE-2017-5736 An elevation of privilege in Intel Software Guard Extensions Platform Software Component before 1.9.105.42329 allows a local attacker to execute arbi… Software Guard Extensions Platform Software Component 1.9.105.42329+ Fix from $1,9502018-03-20 HIGH 7.8 CVE-2017-5727 Pointer dereference in subsystem in Intel Graphics Driver 15.40.x.x, 15.45.x.x, 15.46.x.x allows unprivileged user to elevate privileges via local ac… Graphics Driver Mitigation only Fix from $1,9502018-02-02 MEDIUM 5.5 CVE-2017-5699 Input validation error in Intel MinnowBoard 3 Firmware versions prior to 0.65 allow local attacker to cause denial of service via UEFI APIs. Minnowboard 3 Firmware 0.65+ Fix from $1,6002018-01-18 HIGH 7.8 CVE-2017-5696 Untrusted search path in Intel Graphics Driver 15.40.x.x, 15.45.x.x, and 21.20.x.x allows unprivileged user to elevate privileges via local access. Graphics Driver 21.20.16.4860+ Fix from $1,9502018-01-18 MEDIUM 6.0 CVE-2018-3610 SEMA driver in Intel Driver and Support Assistant before version 3.1.1 allows a local attacker the ability to read and writing to Memory Status regis… Driver \& Support Assistant 3.1.1+ Fix from $1,6002018-01-09 MEDIUM 5.6 CVE-2017-5754EPSS 84% Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disclosure of information to an at… Atom C Patch available Fix from $1,6002018-01-04 HIGH 7.8 CVE-2017-5717 Type Confusion in Content Protection HECI Service in Intel Graphics Driver allows unprivileged user to elevate privileges via local access. Graphics Driver No fix yet Fix from $1,9502017-12-12 CRITICAL 9.8 CVE-2017-5719 A vulnerability in the Intel Deep Learning Training Tool Beta 1 allows a network attacker to remotely execute code as a local user. Deep Learning Training Tool No fix yet Fix from $2,3002017-11-21 HIGH 7.8 CVE-2017-5705 Multiple buffer overflows in kernel in Intel Manageability Engine Firmware 11.0/11.5/11.6/11.7/11.10/11.20 allow attacker with local access to the sy… Manageability Engine Firmware Mitigation only Fix from $1,9502017-11-21 HIGH 7.8 CVE-2017-5706 Multiple buffer overflows in kernel in Intel Server Platform Services Firmware 4.0 allow attacker with local access to the system to execute arbitrar… Server Platform Services Firmware Patch available Fix from $1,9502017-11-21 HIGH 7.8 CVE-2017-5707 Multiple buffer overflows in kernel in Intel Trusted Execution Engine Firmware 3.0 allow attacker with local access to the system to execute arbitrar… Trusted Execution Engine Firmware Mitigation only Fix from $1,9502017-11-21 HIGH 7.8 CVE-2017-5708 Multiple privilege escalations in kernel in Intel Manageability Engine Firmware 11.0/11.5/11.6/11.7/11.10/11.20 allow unauthorized process to access … Manageability Engine Firmware Mitigation only Fix from $1,9502017-11-21 HIGH 7.8 CVE-2017-5709 Multiple privilege escalations in kernel in Intel Server Platform Services Firmware 4.0 allows unauthorized process to access privileged content via … Server Platform Services Firmware Patch available Fix from $1,9502017-11-21 HIGH 7.8 CVE-2017-5710 Multiple privilege escalations in kernel in Intel Trusted Execution Engine Firmware 3.0 allows unauthorized process to access privileged content via … Trusted Execution Engine Firmware Mitigation only Fix from $1,9502017-11-21 HIGH 7.8 CVE-2017-5711 Multiple buffer overflows in Active Management Technology (AMT) in Intel Manageability Engine Firmware 8.x/9.x/10.x/11.0/11.5/11.6/11.7/11.10/11.20 a… Manageability Engine Firmware after 10.0.55.3000 Fix from $1,9502017-11-21 HIGH 7.4 CVE-2017-5729 Frame replay vulnerability in Wi-Fi subsystem in Intel Dual-Band and Tri-Band Wireless-AC Products allows remote attacker to replay frames via channe… Dual Band Wireless Ac 3160 Mitigation only Fix from $1,9502017-11-21 HIGH 7.2 CVE-2017-5712 Buffer overflow in Active Management Technology (AMT) in Intel Manageability Engine Firmware 8.x/9.x/10.x/11.0/11.5/11.6/11.7/11.10/11.20 allows atta… Manageability Engine Firmware after 10.0.55.3000 Fix from $1,9502017-11-21 CRITICAL 9.1 CVE-2017-5738 Escalation of privilege vulnerability in admin portal for Intel Unite App versions 3.1.32.12, 3.1.41.18 and 3.1.45.26 allows an attacker with network… Unite Patch available Fix from $2,3002017-11-16 HIGH 8.4 CVE-2017-5700 Insufficient protection of password storage in system firmware for Intel NUC7i3BNK, NUC7i3BNH, NUC7i5BNK, NUC7i5BNH, NUC7i7BNH versions BN0049 and be… Nuc7i7bnh Firmware Patch available Fix from $1,9502017-10-11 HIGH 7.5 CVE-2017-5721 Insufficient input validation in system firmware for Intel NUC7i3BNK, NUC7i3BNH, NUC7i5BNK, NUC7i5BNH, NUC7i7BNH versions BN0049 and below allows loc… Nuc7i7bnh Firmware Patch available Fix from $1,9502017-10-11