alirezaaminzadeh/cve-riskrank huggingface dataset:
CVE-2020-0477 (published 2020-12-15)
In sendLinkConfigurationChangedBroadcast of ClientModeImpl.java, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure of the current network configuration with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-162246414
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-862
Affected vendors: google
Affected products: android
CVE-2020-0478 (published 2020-12-15)
In extend_frame_lowbd of restoration.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-150780418
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-787
Affected vendors: google
Affected products: android
CVE-2020-0479 (published 2020-12-15)
In callUnchecked of DocumentsProvider.java, there is a possible permissions bypass. This could lead to local escalation of privilege allowing a malicious app to access files available to the DocumentProvider without user permission, with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-157294893
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-863
Affected vendors: google
Affected products: android
CVE-2020-0480 (published 2020-12-15)
In callUnchecked of DocumentsProvider.java, there is a possible permissions bypass due to a missing permission check. This could lead to local escalation of privilege allowing a caller to copy, move, or delete files accessible to DocumentsProvider with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-157320716
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-862
Affected vendors: google
Affected products: android
CVE-2020-0481 (published 2020-12-15)
In AndroidManifest.xml, there is a possible permissions bypass. This could lead to local escalation of privilege allowing a non-system app to send a broadcast it shouldn't have permissions to send, with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-157472962
Severity: LOW (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N)
Weakness: CWE-863
Affected vendors: google
Affected products: android
CVE-2020-0482 (published 2020-12-15)
In command of IncidentService.cpp, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-150706572
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-125
Affected vendors: google
Affected products: android
CVE-2020-0483 (published 2020-12-15)
In DrmManagerService::~DrmManagerService() of DrmManagerService.cpp, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-155647761
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-416
Affected vendors: google
Affected products: android
CVE-2020-0484 (published 2020-12-15)
In destroyResources of ComposerClient.h, there is possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-155769496
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-416
Affected vendors: google
Affected products: android
CVE-2020-0485 (published 2020-12-15)
In areFunctionsSupported of UsbBackend.java, there is a possible access to tethering from a guest account due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-166125765
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-862
Affected vendors: google
Affected products: android
CVE-2020-0486 (published 2020-12-15)
In openAssetFileListener of ContactsProvider2.java, there is a possible permission bypass due to an insecure default value. This could lead to local escalation of privilege to change contact data with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-150857116
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-276
Affected vendors: google
Affected products: android
CVE-2020-0488 (published 2020-12-15)
In ihevc_inter_pred_chroma_copy_ssse3 of ihevc_inter_pred_filters_ssse3_intr.c, there is a possible information disclosure due to uninitialized data. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-158484516
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N)
Weakness: CWE-200
Affected vendors: google
Affected products: android
CVE-2020-0489 (published 2020-12-15)
In Parse_data of eas_mdls.c, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution in the media extractor with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-151096540
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-787
Affected vendors: google
Affected products: android
CVE-2020-0490 (published 2020-12-15)
In floor1_info_unpack of floor1.c, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-155560008
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N)
Weakness: CWE-125
Affected vendors: google
Affected products: android
CVE-2020-0491 (published 2020-12-15)
In readBlock of MatroskaExtractor.cpp, there is a possible denial of service due to resource exhaustion. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-156819528
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Weakness: CWE-401
Affected vendors: google
Affected products: android
CVE-2020-0492 (published 2020-12-15)
In BitstreamFillCache of bitstream.cpp, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-154058264
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N)
Weakness: CWE-125
Affected vendors: google
Affected products: android
CVE-2020-0493 (published 2020-12-15)
In CPDF_SampledFunc::v_Call of cpdf_sampledfunc.cpp, there is a possible out of bounds read due to improper input validation. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-150615407
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-20
Affected vendors: google
Affected products: android
CVE-2020-0494 (published 2020-12-15)
In ih264d_parse_ave of ih264d_sei.c, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-152895390
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N)
Weakness: CWE-125
Affected vendors: google
Affected products: android
CVE-2020-0495 (published 2020-12-15)
In decode_Huffman of JBig2_SddProc.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-155473137
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-190
Affected vendors: google
Affected products: android
CVE-2020-0496 (published 2020-12-15)
In CPDF_RenderStatus::LoadSMask of cpdf_renderstatus.cpp, there is a possible memory corruption due to a use-after free. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-149481220
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-416
Affected vendors: google
Affected products: android
CVE-2020-0497 (published 2020-12-15)
In canUseBiometric of BiometricServiceBase, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-158481661
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-862
Affected vendors: google
Affected products: android
CVE-2020-0498 (published 2020-12-15)
In decode_packed_entry_number of codebook.c, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-160633884
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N)
Weakness: CWE-125
Affected vendors: google
Affected products: android
CVE-2020-0499 (published 2020-12-15)
In FLAC__bitreader_read_rice_signed_block of bitreader.c, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-156076070
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L)
Weakness: CWE-125
Affected vendors: debian, fedoraproject, google
Affected products: android, debian_linux, fedora
CVE-2020-0500 (published 2020-12-15)
In startInputUncheckedLocked of InputMethodManager.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-154913391
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Affected vendors: google
Affected products: android
CVE-2020-0501 (published 2020-03-12)
Buffer overflow in Intel(R) Graphics Drivers before version 26.20.100.6912 may allow an authenticated user to potentially enable a denial of service via local access.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-120
Affected vendors: intel
Affected products: graphics_driver
CVE-2020-0502 (published 2020-03-12)
Improper access control in Intel(R) Graphics Drivers before version 26.20.100.6912 may allow an authenticated user to potentially enable escalation of privilege via local access.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L)
Affected vendors: intel
Affected products: graphics_driver
CVE-2020-0503 (published 2020-03-12)
Improper access control in Intel(R) Graphics Drivers before version 26.20.100.7212 may allow an authenticated user to potentially enable information disclosure via local access.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Affected vendors: intel
Affected products: graphics_driver
CVE-2020-0504 (published 2020-03-12)
Buffer overflow in Intel(R) Graphics Drivers before versions 15.40.44.5107, 15.45.30.5103, and 26.20.100.7158 may allow an authenticated user to potentially enable escalation of privilege and denial of service via local access.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-120
Affected vendors: intel
Affected products: graphics_driver
CVE-2020-0505 (published 2020-03-12)
Improper conditions check in Intel(R) Graphics Drivers before versions 15.33.49.5100, 15.36.38.5117, 15.40.44.5107, 15.45.30.5103, and 26.20.100.7212 may allow an authenticated user to potentially enable information disclosure and denial of service via local
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L)
Affected vendors: intel
Affected products: graphics_driver
CVE-2020-0506 (published 2020-03-12)
Improper initialization in Intel(R) Graphics Drivers before versions 15.40.44.5107, 15.45.29.5077, and 26.20.100.7000 may allow a privileged user to potentially enable a denial of service via local access.
Severity: LOW (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L)
Weakness: CWE-665
Affected vendors: intel
Affected products: graphics_driver
CVE-2020-0507 (published 2020-03-12)
Unquoted service path in Intel(R) Graphics Drivers before versions 15.33.49.5100, 15.36.38.5117, 15.40.44.5107, 15.45.30.5103, and 26.20.100.7212 may allow an authenticated user to potentially enable denial of service via local access.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-428
Affected vendors: intel
Affected products: graphics_driver
CVE-2020-0508 (published 2020-03-12)
Incorrect default permissions in the installer for Intel(R) Graphics Drivers before versions 15.33.49.5100, 15.36.38.5117, 15.40.44.5107, 15.45.30.5103, and 26.20.100.7212 may allow an authenticated user to potentially enable escalation of privilege via local access.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-276
Affected vendors: intel
Affected products: graphics_driver
CVE-2020-0510 (published 2020-08-13)
Out of bounds read in some Intel(R) Graphics Drivers before versions 15.45.31.5127 and 15.40.45.5126 may allow an authenticated user to potentially enable escalation of privilege via local access.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-125
Affected vendors: intel
Affected products: graphics_drivers
CVE-2020-0511 (published 2020-03-12)
Uncaught exception in system driver for Intel(R) Graphics Drivers before version 15.40.44.5107 may allow an authenticated user to potentially enable a denial of service via local access.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-755
Affected vendors: intel
Affected products: graphics_driver
CVE-2020-0512 (published 2020-08-13)
Uncaught exception in the system driver for some Intel(R) Graphics Drivers before version 15.33.50.5129 may allow an authenticated user to potentially enable denial of service via local access.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-755
Affected vendors: intel
Affected products: graphics_drivers
CVE-2020-0513 (published 2020-08-13)
Out of bounds write for some Intel(R) Graphics Drivers before version 15.33.50.5129 may allow an authenticated user to potentially enable escalation of privilege via local access.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-787
Affected vendors: intel
Affected products: graphics_drivers
CVE-2020-0514 (published 2020-03-12)
Improper default permissions in the installer for Intel(R) Graphics Drivers before versions 26.20.100.7463 and 15.45.30.5103 may allow an authenticated user to potentially enable escalation of privilege via local access.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-276
Affected vendors: intel
Affected products: graphics_driver
CVE-2020-0515 (published 2020-03-12)
Uncontrolled search path element in the installer for Intel(R) Graphics Drivers before versions 26.20.100.7584, 15.45.30.5103, 15.40.44.5107, 15.36.38.5117, and 15.33.49.5100 may allow an authenticated user to potentially enable escalation of privilege via local access
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-427
Affected vendors: intel
Affected products: graphics_driver
CVE-2020-0516 (published 2020-03-12)
Improper access control in Intel(R) Graphics Drivers before version 26.20.100.7463 may allow an authenticated user to potentially enable denial of service via local access.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Affected vendors: intel
Affected products: graphics_driver
CVE-2020-0517 (published 2020-03-12)
Out-of-bounds write in Intel(R) Graphics Drivers before version 15.36.38.5117 may allow an authenticated user to potentially enable escalation of privilege or denial of service via local access.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L)
Weakness: CWE-787
Affected vendors: intel
Affected products: graphics_driver
CVE-2020-0518 (published 2021-02-17)
Improper access control in the Intel(R) HD Graphics Control Panel before version 15.40.46.5144 and 15.36.39.5143 may allow an authenticated user to potentially enable denial of service via local access.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Affected vendors: intel
Affected products: graphics_drivers
CVE-2020-0519 (published 2020-03-12)
Improper access control for Intel(R) Graphics Drivers before versions 15.33.49.5100 and 15.36.38.5117 may allow an authenticated user to potentially enable escalation of privilege or denial of service via local access.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Affected vendors: intel
Affected products: graphics_driver
CVE-2020-0520 (published 2020-03-12)
Path traversal in igdkmd64.sys for Intel(R) Graphics Drivers before versions 15.45.30.5103, 15.40.44.5107, 15.36.38.5117 and 15.33.49.5100 may allow an authenticated user to potentially enable escalation of privilege or denial of service via local access.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-22
Affected vendors: intel
Affected products: graphics_driver
CVE-2020-0521 (published 2021-02-17)
Insufficient control flow management in some Intel(R) Graphics Drivers before version 15.45.32.5145 may allow an authenticated user to potentially enable escalation of privilege via local access.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Affected vendors: intel
Affected products: graphics_drivers
CVE-2020-0522 (published 2021-02-17)
Improper initialization in the firmware for the Intel(R) Ethernet I210 Controller series of network adapters before version 3.30 may allow a privileged user to potentially enable denial of service via local access.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-665
Affected vendors: intel
Affected products: ethernet_controller_i210-at, ethernet_controller_i210-cl, ethernet_controller_i210-cs, ethernet_controller_i210-is, ethernet_controller_i210-it, ethernet_controller_i210_firmware
CVE-2020-0523 (published 2021-02-17)
Improper access control in the firmware for the Intel(R) Ethernet I210 Controller series of network adapters before version 3.30 may potentially allow a privileged user to enable a denial of service via local access.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)
Affected vendors: intel
Affected products: ethernet_controller_i210-at, ethernet_controller_i210-cl, ethernet_controller_i210-cs, ethernet_controller_i210-is, ethernet_controller_i210-it, ethernet_controller_i210_firmware
CVE-2020-0524 (published 2021-02-17)
Improper default permissions in the firmware for the Intel(R) Ethernet I210 Controller series of network adapters before version 3.30 may allow an authenticated user to potentially enable denial of service via local access.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-276
Affected vendors: intel
Affected products: ethernet_controller_i210-at, ethernet_controller_i210-cl, ethernet_controller_i210-cs, ethernet_controller_i210-is, ethernet_controller_i210-it, ethernet_controller_i210_firmware
CVE-2020-0525 (published 2021-02-17)
Improper access control in firmware for the Intel(R) Ethernet I210 Controller series of network adapters before version 3.30 may allow a privileged user to potentially enable denial of service via local access.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)
Affected vendors: intel
Affected products: ethernet_controller_i210-at, ethernet_controller_i210-cl, ethernet_controller_i210-cs, ethernet_controller_i210-is, ethernet_controller_i210-it, ethernet_controller_i210_firmware
CVE-2020-0526 (published 2020-03-12)
Improper input validation in firmware for Intel(R) NUC may allow a privileged user to potentially enable escalation of privilege via local access. The list of affected products is provided in intel-sa-00343: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00343.html
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-20
Affected vendors: intel
Affected products: compute_stick_stck1a32wfc, compute_stick_stck1a32wfc_firmware, compute_stick_stck1a8lfc, compute_stick_stck1a8lfc_firmware, compute_stick_stk1a32sc, compute_stick_stk1a32sc_firmware, compute_stick_stk1aw32sc, compute_stick_stk1aw32sc_firmware, compute_stick_stk2m364cc, compute_stick_stk2m364cc_firmware, compute_stick_stk2m3w64cc, compute_stick_stk2m3w64cc_firmware, nuc_7_enthusiast_pc_nuc7i7bnhxg, nuc_7_enthusiast_pc_nuc7i7bnhxg_firmware, nuc_7_essential_pc_nuc7cjysal, nuc_7_essential_pc_nuc7cjysal_firmware, nuc_7_home_a_mini_pc_nuc7i3bnhxf, nuc_7_home_a_mini_pc_nuc7i3bnhxf_firmware, nuc_7_home_a_mini_pc_nuc7i5bnhxf, nuc_7_home_a_mini_pc_nuc7i5bnhxf_firmware, nuc_7_home_a_mini_pc_nuc7i5bnkp, nuc_7_home_a_mini_pc_nuc7i5bnkp_firmware, nuc_8_business_pc_nuc8i7hnkqc, nuc_8_business_pc_nuc8i7hnkqc_firmware, nuc_8_enthusiast_pc_nuc8i7bekqa
CVE-2020-0527 (published 2020-06-15)
Insufficient control flow management in firmware for some Intel(R) Data Center SSDs may allow a privileged user to potentially enable information disclosure via local access.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N)
Affected vendors: intel
Affected products: ssd_d3-s4510, ssd_d3-s4510_firmware, ssd_dc_p4510, ssd_dc_p4510_firmware, ssd_dc_p4511, ssd_dc_p4511_firmware, ssd_dc_p4610, ssd_dc_p4610_firmware, ssd_dc_p4618, ssd_dc_p4618_firmware
CVE-2020-0528 (published 2020-06-15)
Improper buffer restrictions in BIOS firmware for 7th, 8th, 9th and 10th Generation Intel(R) Core(TM) Processor families may allow an authenticated user to potentially enable escalation of privilege and/or denial of service via local access.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Affected vendors: intel
Affected products: core_i5-7200u, core_i5-7200u_firmware, core_i5-7260u, core_i5-7260u_firmware, core_i5-7267u, core_i5-7267u_firmware, core_i5-7287u, core_i5-7287u_firmware, core_i5-7300hq, core_i5-7300hq_firmware, core_i5-7300u, core_i5-7300u_firmware, core_i5-7360u, core_i5-7360u_firmware, core_i5-7400, core_i5-7400_firmware, core_i5-7400t, core_i5-7400t_firmware, core_i5-7440eq, core_i5-7440eq_firmware, core_i5-7440hq, core_i5-7440hq_firmware, core_i5-7442eq, core_i5-7442eq_firmware, core_i5-7500
CVE-2020-0529 (published 2020-06-15)
Improper initialization in BIOS firmware for 8th, 9th and 10th Generation Intel(R) Core(TM) Processor families may allow an unauthenticated user to potentially enable escalation of privilege via local access.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-665
Affected vendors: intel
Affected products: core_i5-7200u, core_i5-7200u_firmware, core_i5-7260u, core_i5-7260u_firmware, core_i5-7267u, core_i5-7267u_firmware, core_i5-7287u, core_i5-7287u_firmware, core_i5-7300hq, core_i5-7300hq_firmware, core_i5-7300u, core_i5-7300u_firmware, core_i5-7360u, core_i5-7360u_firmware, core_i5-7400, core_i5-7400_firmware, core_i5-7400t, core_i5-7400t_firmware, core_i5-7440eq, core_i5-7440eq_firmware, core_i5-7440hq, core_i5-7440hq_firmware, core_i5-7442eq, core_i5-7442eq_firmware, core_i5-7500
CVE-2020-0530 (published 2020-03-12)
Improper buffer restrictions in firmware for Intel(R) NUC may allow an authenticated user to potentially enable escalation of privilege via local access. The list of affected products is provided in intel-sa-00343: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00343.html
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-120
Affected vendors: intel
Affected products: compute_stick_stck1a32wfc, compute_stick_stck1a32wfc_firmware, compute_stick_stck1a8lfc, compute_stick_stck1a8lfc_firmware, compute_stick_stk1a32sc, compute_stick_stk1a32sc_firmware, compute_stick_stk1aw32sc, compute_stick_stk1aw32sc_firmware, compute_stick_stk2m364cc, compute_stick_stk2m364cc_firmware, compute_stick_stk2m3w64cc, compute_stick_stk2m3w64cc_firmware, nuc_7_enthusiast_pc_nuc7i7bnhxg, nuc_7_enthusiast_pc_nuc7i7bnhxg_firmware, nuc_7_essential_pc_nuc7cjysal, nuc_7_essential_pc_nuc7cjysal_firmware, nuc_7_home_a_mini_pc_nuc7i3bnhxf, nuc_7_home_a_mini_pc_nuc7i3bnhxf_firmware, nuc_7_home_a_mini_pc_nuc7i5bnhxf, nuc_7_home_a_mini_pc_nuc7i5bnhxf_firmware, nuc_7_home_a_mini_pc_nuc7i5bnkp, nuc_7_home_a_mini_pc_nuc7i5bnkp_firmware, nuc_8_business_pc_nuc8i7hnkqc, nuc_8_business_pc_nuc8i7hnkqc_firmware, nuc_8_enthusiast_pc_nuc8i7bekqa
CVE-2020-0531 (published 2020-06-15)
Improper input validation in Intel(R) AMT versions before 11.8.77, 11.12.77, 11.22.77 and 12.0.64 may allow an authenticated user to potentially enable information disclosure via network access.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-20
Affected vendors: intel
Affected products: active_management_technology_firmware
CVE-2020-0532 (published 2020-06-15)
Improper input validation in subsystem for Intel(R) AMT versions before 11.8.77, 11.12.77, 11.22.77 and 12.0.64 may allow an unauthenticated user to potentially enable denial of service or information disclosure via adjacent access.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H)
Weakness: CWE-20
Affected vendors: intel
Affected products: active_management_technology_firmware
CVE-2020-0533 (published 2020-06-15)
Reversible one-way hash in Intel(R) CSME versions before 11.8.76, 11.12.77 and 11.22.77 may allow a privileged user to potentially enable escalation of privilege, denial of service or information disclosure via local access.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-326
Affected vendors: intel
Affected products: converged_security_management_engine_firmware
CVE-2020-0534 (published 2020-06-15)
Improper input validation in the DAL subsystem for Intel(R) CSME versions before 12.0.64, 13.0.32, 14.0.33 and 14.5.12 may allow an unauthenticated user to potentially enable denial of service via network access.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-20
Affected vendors: intel
Affected products: converged_security_management_engine_firmware
CVE-2020-0535 (published 2020-06-15)
Improper input validation in Intel(R) AMT versions before 11.8.76, 11.12.77, 11.22.77 and 12.0.64 may allow an unauthenticated user to potentially enable information disclosure via network access.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)
Weakness: CWE-20
Affected vendors: intel
Affected products: active_management_technology_firmware
CVE-2020-0536 (published 2020-06-15)
Improper input validation in the DAL subsystem for Intel(R) CSME versions before 11.8.77, 11.12.77, 11.22.77, 12.0.64, 13.0.32,14.0.33 and Intel(R) TXE versions before 3.1.75 and 4.0.25 may allow an unauthenticated user to potentially enable information disclosure via network access.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-20
Affected vendors: intel
Affected products: converged_security_management_engine_firmware, trusted_execution_engine_firmware
CVE-2020-0537 (published 2020-06-15)
Improper input validation in subsystem for Intel(R) AMT versions before 11.8.77, 11.12.77, 11.22.77 and 12.0.64 may allow a privileged user to potentially enable denial of service via network access.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-20
Affected vendors: intel
Affected products: active_management_technology_firmware
CVE-2020-0538 (published 2020-06-15)
Improper input validation in subsystem for Intel(R) AMT versions before 11.8.77, 11.12.77, 11.22.77 and 12.0.64 may allow an unauthenticated user to potentially enable denial of service via network access.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-20
Affected vendors: intel
Affected products: active_management_technology_firmware
CVE-2020-0539 (published 2020-06-15)
Path traversal in subsystem for Intel(R) DAL software for Intel(R) CSME versions before 11.8.77, 11.12.77, 11.22.77, 12.0.64, 13.0.32, 14.0.33 and Intel(R) TXE versions before 3.1.75, 4.0.25 may allow an unprivileged user to potentially enable denial of service via local access.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-22
Affected vendors: intel
Affected products: converged_security_management_engine_firmware, trusted_execution_engine_firmware
CVE-2020-0540 (published 2020-06-15)
Insufficiently protected credentials in Intel(R) AMT versions before 11.8.77, 11.12.77, 11.22.77 and 12.0.64 may allow an unauthenticated user to potentially enable information disclosure via network access.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-522
Affected vendors: intel
Affected products: active_management_technology_firmware
CVE-2020-0541 (published 2020-06-15)
Out-of-bounds write in subsystem for Intel(R) CSME versions before 12.0.64, 13.0.32, 14.0.33 and 14.5.12 may allow a privileged user to potentially enable escalation of privilege via local access.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-787
Affected vendors: intel
Affected products: converged_security_management_engine_firmware
CVE-2020-0542 (published 2020-06-15)
Improper buffer restrictions in subsystem for Intel(R) CSME versions before 12.0.64, 13.0.32, 14.0.33 and 14.5.12 may allow an authenticated user to potentially enable escalation of privilege, information disclosure or denial of service via local access.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Affected vendors: intel
Affected products: converged_security_management_engine_firmware
CVE-2020-0543 (published 2020-06-15)
Incomplete cleanup from specific special register read operations in some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-459
Affected vendors: canonical, fedoraproject, intel, mcafee, opensuse, siemens
Affected products: celeron_1000m, celeron_1005m, celeron_1007u, celeron_1017u, celeron_1019y, celeron_1020e, celeron_1020m, celeron_1037u, celeron_1047ue, celeron_2955u, celeron_2957u, celeron_2970m, celeron_2980u, celeron_2981u, celeron_3755u, celeron_3765u, celeron_3855u, celeron_3865u, celeron_3955u, celeron_3965u, celeron_3965y, celeron_5305u, celeron_725c, celeron_927ue, celeron_g1610
CVE-2020-0544 (published 2021-02-17)
Insufficient control flow management in the kernel mode driver for some Intel(R) Graphics Drivers before version 15.36.39.5145 may allow an authenticated user to potentially enable escalation of privilege via local access.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Affected vendors: intel
Affected products: graphics_drivers
CVE-2020-0545 (published 2020-06-15)
Integer overflow in subsystem for Intel(R) CSME versions before 11.8.77, 11.12.77, 11.22.77 and Intel(R) TXE versions before 3.1.75, 4.0.25 and Intel(R) Server Platform Services (SPS) versions before SPS_E5_04.01.04.380.0, SPS_SoC-X_04.00.04.128.0, SPS_SoC-A_04.00.04.211.0, SPS_E3_04.01.04.109.0, SPS_E3_04.08.04.070.0 may allow a privileged user to potentially enable denial of service via local access.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-190
Affected vendors: intel
Affected products: converged_security_management_engine_firmware, server_platform_services, trusted_execution_engine
CVE-2020-0546 (published 2020-03-12)
Unquoted service path in Intel(R) Optane(TM) DC Persistent Memory Module Management Software before version 1.0.0.3461 may allow an authenticated user to potentially enable escalation of privilege and denial of service via local access.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-428
Affected vendors: intel, microsoft
Affected products: optane_dc_persistent_memory_module_management, windows_server_2019
CVE-2020-0547 (published 2020-04-15)
Incorrect default permissions in the installer for Intel(R) Data Migration Software versions 3.3 and earlier may allow an authenticated user to potentially enable escalation of privilege via local access.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-276
Affected vendors: intel
Affected products: data_migration
CVE-2020-0548 (published 2020-01-28)
Cleanup errors in some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-404
Affected vendors: intel
Affected products: celeron_3855u, celeron_3855u_firmware, celeron_3865u, celeron_3865u_firmware, celeron_3955u, celeron_3955u_firmware, celeron_3965u, celeron_3965u_firmware, celeron_3965y, celeron_3965y_firmware, celeron_g3900, celeron_g3900_firmware, celeron_g3900t, celeron_g3900t_firmware, celeron_g3900te, celeron_g3900te_firmware, celeron_g3902e, celeron_g3902e_firmware, celeron_g3920, celeron_g3920_firmware, celeron_g3920t, celeron_g3920t_firmware, celeron_g3930e, celeron_g3930e_firmware, celeron_g3930te
CVE-2020-0549 (published 2020-01-28)
Cleanup errors in some data cache evictions for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-404
Affected vendors: canonical, debian, fedoraproject, intel, opensuse
Affected products: celeron_3855u, celeron_3855u_firmware, celeron_3865u, celeron_3865u_firmware, celeron_3955u, celeron_3955u_firmware, celeron_3965u, celeron_3965u_firmware, celeron_3965y, celeron_3965y_firmware, celeron_g3900, celeron_g3900_firmware, celeron_g3900t, celeron_g3900t_firmware, celeron_g3900te, celeron_g3900te_firmware, celeron_g3902e, celeron_g3902e_firmware, celeron_g3920, celeron_g3920_firmware, celeron_g3920t, celeron_g3920t_firmware, celeron_g3930e, celeron_g3930e_firmware, celeron_g3930te
CVE-2020-0550 (published 2020-03-12)
Improper data forwarding in some data cache for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access. The list of affected products is provided in intel-sa-00330: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00330.html
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N)
Affected vendors: intel
Affected products: celeron_1000m, celeron_1005m, celeron_1007u, celeron_1017u, celeron_1019y, celeron_1020e, celeron_1020m, celeron_1037u, celeron_1047ue, celeron_2955u, celeron_2957u, celeron_2970m, celeron_2980u, celeron_2981u, celeron_3765u, celeron_725c, celeron_787, celeron_797, celeron_807, celeron_807ue, celeron_827e, celeron_847, celeron_847e, celeron_857, celeron_867
CVE-2020-0551 (published 2020-03-12)
Load value injection in some Intel(R) Processors utilizing speculative execution may allow an authenticated user to potentially enable information disclosure via a side channel with local access. The list of affected products is provided in intel-sa-00334: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00334.html
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N)
Affected vendors: intel
Affected products: atom_c2308, atom_c2316, atom_c2338, atom_c2350, atom_c2358, atom_c2508, atom_c2516, atom_c2518, atom_c2530, atom_c2538, atom_c2550, atom_c2558, atom_c2718, atom_c2730, atom_c2738, atom_c2750, atom_c2758, atom_e3805, atom_e3815, atom_e3825, atom_e3826, atom_e3827, atom_e3845, atom_x5-z8300, atom_x5-z8330
CVE-2020-0553 (published 2020-08-13)
Out-of-bounds read in kernel mode driver for some Intel(R) Wireless Bluetooth(R) products on Windows* 10, may allow a privileged user to potentially enable information disclosure via local access.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-125
Affected vendors: intel, microsoft
Affected products: ac_3165_firmware, ac_3168_firmware, ac_7265_firmware, ac_8260_firmware, ac_8265_firmware, ac_9260_firmware, ac_9461_firmware, ac_9462_firmware, ac_9560_firmware, ax200_firmware, ax201_firmware, windows_10
CVE-2020-0554 (published 2020-08-13)
Race condition in software installer for some Intel(R) Wireless Bluetooth(R) products on Windows* 7, 8.1 and 10 may allow an unprivileged user to potentially enable escalation of privilege via local access.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-362
Affected vendors: intel, microsoft
Affected products: ac_3165_firmware, ac_3168_firmware, ac_7265_firmware, ac_8260_firmware, ac_8265_firmware, ac_9260_firmware, ac_9461_firmware, ac_9462_firmware, ac_9560_firmware, ax200_firmware, ax201_firmware, windows_10, windows_7, windows_8.1
CVE-2020-0555 (published 2020-08-13)
Improper input validation for some Intel(R) Wireless Bluetooth(R) products may allow an authenticated user to potentially enable escalation of privilege via local access.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-20
Affected vendors: intel
Affected products: ac_3165, ac_3165_firmware, ac_3168, ac_3168_firmware, ac_7265, ac_7265_firmware, ac_8260, ac_8260_firmware, ac_8265, ac_8265_firmware, ac_9260, ac_9260_firmware, ac_9461, ac_9461_firmware, ac_9462, ac_9462_firmware, ac_9560, ac_9560_firmware, ax200, ax200_firmware, ax201, ax201_firmware
CVE-2020-0556 (published 2020-03-12)
Improper access control in subsystem for BlueZ before version 5.54 may allow an unauthenticated user to potentially enable escalation of privilege and denial of service via adjacent access
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L)
Affected vendors: bluez, canonical, debian, opensuse
Affected products: bluez, debian_linux, leap, ubuntu_linux
CVE-2020-0557 (published 2020-04-15)
Insecure inherited permissions in Intel(R) PROSet/Wireless WiFi products before version 21.70 on Windows 10 may allow an authenticated user to potentially enable escalation of privilege via local access.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-732
Affected vendors: intel
Affected products: dual_band_wireless-ac_3165, dual_band_wireless-ac_3168, dual_band_wireless-ac_7265_\(rev_d\), dual_band_wireless-ac_8260, dual_band_wireless-ac_8265, proset\/wireless_wifi, wi-fi_6_ax200, wi-fi_6_ax201, wireless-ac_9260, wireless-ac_9461, wireless-ac_9462, wireless-ac_9560
CVE-2020-0558 (published 2020-04-15)
Improper buffer restrictions in kernel mode driver for Intel(R) PROSet/Wireless WiFi products before version 21.70 on Windows 10 may allow an unprivileged user to potentially enable denial of service via adjacent access.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Affected vendors: intel
Affected products: dual_band_wireless-ac_3165, dual_band_wireless-ac_3168, dual_band_wireless-ac_7265_\(rev_d\), dual_band_wireless-ac_8260, dual_band_wireless-ac_8265, proset\/wireless_wifi, wi-fi_6_ax200, wi-fi_6_ax201, wireless-ac_9260, wireless-ac_9461, wireless-ac_9462, wireless-ac_9560
CVE-2020-0559 (published 2020-08-13)
Insecure inherited permissions in some Intel(R) PROSet/Wireless WiFi products on Windows* 7 and 8.1 before version 21.40.5.1 may allow an authenticated user to potentially enable escalation of privilege via local access.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-732
Affected vendors: intel, microsoft
Affected products: ac_3165_firmware, ac_3168_firmware, ac_7265_firmware, ac_8260_firmware, ac_8265_firmware, ac_9260_firmware, ac_9461_firmware, ac_9462_firmware, ac_9560_firmware, atom_x5-e3930, atom_x5-e3940, atom_x7-e3950, ax200_firmware, ax201_firmware, celeron_j1750, celeron_j1800, celeron_j1850, celeron_j1900, celeron_j3060, celeron_j3160, celeron_j3355, celeron_j3355e, celeron_j3455, celeron_j3455e, celeron_j4005
CVE-2020-0560 (published 2020-02-13)
Improper permissions in the installer for the Intel(R) Renesas Electronics(R) USB 3.0 Driver, all versions, may allow an authenticated user to potentially enable escalation of privilege via local access.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-276
Affected vendors: intel
Affected products: renesas_electronics_usb_3.0_driver
CVE-2020-0561 (published 2020-02-13)
Improper initialization in the Intel(R) SGX SDK before v2.6.100.1 may allow an authenticated user to potentially enable escalation of privilege via local access.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-665
Affected vendors: intel, linux, microsoft, opensuse
Affected products: backports, leap, linux_kernel, software_guard_extensions_sdk, windows
CVE-2020-0562 (published 2020-02-13)
Improper permissions in the installer for Intel(R) RWC2, all versions, may allow an authenticated user to potentially enable escalation of privilege via local access.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-276
Affected vendors: intel
Affected products: raid_web_console_2
CVE-2020-0563 (published 2020-02-13)
Improper permissions in the installer for Intel(R) MPSS before version 3.8.6 may allow an authenticated user to potentially enable escalation of privilege via local access.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-732
Affected vendors: intel
Affected products: manycore_platform_software_stack
CVE-2020-0564 (published 2020-02-13)
Improper permissions in the installer for Intel(R) RWC3 for Windows before version 7.010.009.000 may allow an authenticated user to potentially enable escalation of privilege via local access.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-276
Affected vendors: intel
Affected products: raid_web_console_3
CVE-2020-0565 (published 2020-03-12)
Uncontrolled search path in Intel(R) Graphics Drivers before version 26.20.100.7158 may allow an authenticated user to potentially enable escalation of privilege via local access.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-427
Affected vendors: intel
Affected products: graphics_driver
CVE-2020-0566 (published 2020-06-15)
Improper Access Control in subsystem for Intel(R) TXE versions before 3.175 and 4.0.25 may allow an unauthenticated user to potentially enable escalation of privilege via physical access.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Affected vendors: intel
Affected products: trusted_execution_engine_firmware
CVE-2020-0567 (published 2020-03-12)
Improper input validation in Intel(R) Graphics Drivers before version 26.20.100.7212 may allow an authenticated user to enable denial of service via local access.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-20
Affected vendors: intel
Affected products: graphics_driver
CVE-2020-0568 (published 2020-04-15)
Race condition in the Intel(R) Driver and Support Assistant before version 20.1.5 may allow an authenticated user to potentially enable denial of service via local access.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-362
Affected vendors: intel
Affected products: driver_\&_support_assistant
CVE-2020-0569 (published 2020-11-23)
Out of bounds write in Intel(R) PROSet/Wireless WiFi products on Windows 10 may allow an authenticated user to potentially enable denial of service via local access.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-787
Affected vendors: canonical, debian, intel, opensuse, qt
Affected products: 7265, 7265_firmware, ac_3165, ac_3165_firmware, ac_3168, ac_3168_firmware, ac_8260, ac_8260_firmware, ac_8265, ac_8265_firmware, ac_9260, ac_9260_firmware, ac_9461, ac_9461_firmware, ac_9462, ac_9462_firmware, ac_9560, ac_9560_firmware, ax200, ax200_firmware, ax201, ax201_firmware, debian_linux, leap, qt
CVE-2020-0570 (published 2020-09-14)
Uncontrolled search path in the QT Library before 5.14.0, 5.12.7 and 5.9.10 may allow an authenticated user to potentially enable elevation of privilege via local access.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-426
Affected vendors: qt, redhat
Affected products: enterprise_linux, qt
CVE-2020-0571 (published 2020-10-05)
Improper conditions check in BIOS firmware for 8th Generation Intel(R) Core(TM) Processors and Intel(R) Pentium(R) Silver Processor Series may allow an authenticated user to potentially enable information disclosure via local access.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Affected vendors: intel
Affected products: bios, core_i3_8100, core_i3_8100f, core_i3_8100t, core_i3_8300, core_i3_8300t, core_i3_8350k, core_i5_8400, core_i5_8400t, core_i5_8500, core_i5_8500t, core_i5_8600, core_i5_8600k, core_i5_8600t, core_i7_8086k, core_i7_8700, core_i7_8700k, core_i7_8700t, pentium_silver_j5005, pentium_silver_j5040, pentium_silver_n5000, pentium_silver_n5030
CVE-2020-0572 (published 2020-11-12)
Improper input validation in the firmware for Intel(R) Server Board S2600ST and S2600WF families may allow a privileged user to potentially enable escalation of privilege via local access.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-20
Affected vendors: intel
Affected products: server_board_s2600st_firmware, server_board_s2600stbr, server_board_s2600stqr, server_board_s2600wf0r, server_board_s2600wf_firmware, server_board_s2600wfqr, server_board_s2600wftr