alirezaaminzadeh/cve-riskrank huggingface dataset:
CVE-2020-9952 (published 2020-10-16)
An input validation issue was addressed with improved input validation. This issue is fixed in iOS 14.0 and iPadOS 14.0, tvOS 14.0, watchOS 7.0, Safari 14.0, iCloud for Windows 11.4, iCloud for Windows 7.21. Processing maliciously crafted web content may lead to a cross site scripting attack.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L)
Weakness: CWE-79
Affected vendors: apple, webkit
Affected products: icloud, ipados, iphone_os, safari, tvos, watchos, webkitgtk\+
CVE-2020-9954 (published 2020-12-08)
A buffer overflow issue was addressed with improved memory handling. This issue is fixed in watchOS 7.0, tvOS 14.0, macOS Catalina 10.15.7, Security Update 2020-005 High Sierra, Security Update 2020-005 Mojave, iOS 14.0 and iPadOS 14.0. Playing a malicious audio file may lead to arbitrary code execution.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-120
Affected vendors: apple
Affected products: ipados, iphone_os, mac_os_x, tvos, watchos
CVE-2020-9955 (published 2021-04-02)
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in watchOS 7.0, tvOS 14.0, iOS 14.0 and iPadOS 14.0, macOS Big Sur 11.0.1. Processing a maliciously crafted image may lead to arbitrary code execution.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-787
Affected vendors: apple
Affected products: ipados, iphone_os, macos, tvos, watchos
CVE-2020-9956 (published 2021-04-02)
An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.0.1, tvOS 14.0, macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave, watchOS 7.0, iOS 14.0 and iPadOS 14.0. Processing a maliciously crafted font file may lead to arbitrary code execution.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-125
Affected vendors: apple
Affected products: ipados, iphone_os, mac_os_x, macos, tvos, watchos
CVE-2020-9958 (published 2020-10-16)
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 14.0 and iPadOS 14.0. An application may be able to cause unexpected system termination or write kernel memory.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-787
Affected vendors: apple
Affected products: ipados, iphone_os
CVE-2020-9959 (published 2020-10-16)
A lock screen issue allowed access to messages on a locked device. This issue was addressed with improved state management. This issue is fixed in iOS 14.0 and iPadOS 14.0. A person with physical access to an iOS device may be able to view notification contents from the lockscreen.
Severity: LOW (CVSS 3.1 vector: CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)
Weakness: CWE-667
Affected vendors: apple
Affected products: ipados, iphone_os
CVE-2020-9960 (published 2021-04-02)
An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.0.1, tvOS 14.0, macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave, watchOS 7.0, iOS 14.0 and iPadOS 14.0. Processing a maliciously crafted audio file may lead to arbitrary code execution.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-125
Affected vendors: apple
Affected products: ipados, iphone_os, mac_os_x, macos, tvos, watchos
CVE-2020-9961 (published 2020-10-27)
An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Catalina 10.15.7, Security Update 2020-005 High Sierra, Security Update 2020-005 Mojave. Processing a maliciously crafted image may lead to arbitrary code execution.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-125
Affected vendors: apple
Affected products: icloud, ipados, iphone_os, itunes, mac_os_x, tvos, watchos
CVE-2020-9962 (published 2021-04-02)
A buffer overflow was addressed with improved size validation. This issue is fixed in macOS Big Sur 11.0.1, tvOS 14.0, macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave, watchOS 7.0, iOS 14.0 and iPadOS 14.0. Processing a maliciously crafted image may lead to arbitrary code execution.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-120
Affected vendors: apple
Affected products: ipados, iphone_os, mac_os_x, macos, tvos, watchos
CVE-2020-9963 (published 2020-12-08)
The issue was addressed with improved handling of icon caches. This issue is fixed in macOS Big Sur 11.0.1, iOS 14.0 and iPadOS 14.0. A malicious app may be able to determine the existence of files on the computer.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N)
Affected vendors: apple
Affected products: ipados, iphone_os, mac_os_x
CVE-2020-9964 (published 2020-10-16)
A memory initialization issue was addressed with improved memory handling. This issue is fixed in iOS 14.0 and iPadOS 14.0. A local user may be able to read kernel memory.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-665
Affected vendors: apple
Affected products: ipados, iphone_os
CVE-2020-9965 (published 2020-12-08)
An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.0.1, watchOS 7.0, tvOS 14.0, iOS 14.0 and iPadOS 14.0. An application may be able to execute arbitrary code with kernel privileges.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-125
Affected vendors: apple
Affected products: ipados, iphone_os, macos, tvos, watchos
CVE-2020-9966 (published 2020-12-08)
An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.0.1, watchOS 7.0, tvOS 14.0, iOS 14.0 and iPadOS 14.0. An application may be able to execute arbitrary code with kernel privileges.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-125
Affected vendors: apple
Affected products: ipados, iphone_os, mac_os_x, tvos, watchos
CVE-2020-9967 (published 2021-04-02)
Multiple memory corruption issues were addressed with improved input validation. This issue is fixed in macOS Big Sur 11.0.1, tvOS 14.0, macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave, watchOS 7.0, iOS 14.0 and iPadOS 14.0. A remote attacker may be able to cause unexpected system termination or corrupt kernel memory.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-787
Affected vendors: apple
Affected products: ipados, iphone_os, mac_os_x, macos, tvos, watchos
CVE-2020-9968 (published 2020-10-16)
A logic issue was addressed with improved restrictions. This issue is fixed in iOS 14.0 and iPadOS 14.0, macOS Catalina 10.15.7, tvOS 14.0, watchOS 7.0. A malicious application may be able to access restricted files.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N)
Affected vendors: apple
Affected products: ipados, iphone_os, mac_os_x, tvos, watchos
CVE-2020-9969 (published 2020-12-08)
An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Big Sur 11.0.1, watchOS 7.0, tvOS 14.0, iOS 14.0 and iPadOS 14.0. A local user may be able to view senstive user information.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N)
Affected vendors: apple
Affected products: ipados, iphone_os, mac_os_x, tvos, watchos
CVE-2020-9971 (published 2021-04-02)
A logic issue was addressed with improved validation. This issue is fixed in watchOS 7.0, tvOS 14.0, iOS 14.0 and iPadOS 14.0, macOS Big Sur 11.0.1. A malicious application may be able to elevate privileges.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Affected vendors: apple
Affected products: ipados, iphone_os, macos, tvos, watchos
CVE-2020-9972 (published 2020-12-08)
A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 14.0 and iPadOS 14.0. Processing a maliciously crafted USD file may lead to unexpected application termination or arbitrary code execution.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-120
Affected vendors: apple
Affected products: ipad_os, iphone_os, macos, tvos
CVE-2020-9973 (published 2020-10-27)
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Catalina 10.15.7, Security Update 2020-005 High Sierra, Security Update 2020-005 Mojave, iOS 14.0 and iPadOS 14.0. Processing a maliciously crafted USD file may lead to unexpected application termination or arbitrary code execution.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-125
Affected vendors: apple
Affected products: ipados, iphone_os, mac_os_x
CVE-2020-9974 (published 2020-12-08)
A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.0.1, iOS 14.2 and iPadOS 14.2, tvOS 14.2, watchOS 7.1. A malicious application may be able to determine kernel memory layout.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N)
Affected vendors: apple
Affected products: ipados, iphone_os, mac_os_x, tvos, watchos
CVE-2020-9975 (published 2021-04-02)
A use after free issue was addressed with improved memory management. This issue is fixed in macOS Big Sur 11.0.1, tvOS 14.0, macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave, watchOS 7.0, iOS 14.0 and iPadOS 14.0. An application may be able to execute arbitrary code with kernel privileges.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-416
Affected vendors: apple
Affected products: ipados, iphone_os, mac_os_x, macos, tvos, watchos
CVE-2020-9976 (published 2020-10-16)
A logic issue was addressed with improved state management. This issue is fixed in iOS 14.0 and iPadOS 14.0, tvOS 14.0, watchOS 7.0. A malicious application may be able to leak sensitive user information.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N)
Affected vendors: apple
Affected products: ipados, iphone_os, tvos, watchos
CVE-2020-9977 (published 2020-12-08)
A validation issue existed in the entitlement verification. This issue was addressed with improved validation of the process entitlement. This issue is fixed in macOS Big Sur 11.0.1, iOS 14.0 and iPadOS 14.0. A malicious application may be able to determine a user's open tabs in Safari.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N)
Weakness: CWE-20
Affected vendors: apple
Affected products: ipados, iphone_os, mac_os_x
CVE-2020-9978 (published 2021-04-02)
This issue was addressed with improved setting propagation. This issue is fixed in macOS Big Sur 11.0.1, tvOS 14.0, macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave, watchOS 7.0, iOS 14.0 and iPadOS 14.0. An attacker in a privileged network position may be able to unexpectedly alter application state.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N)
Affected vendors: apple
Affected products: ipados, iphone_os, mac_os_x, macos, watchos
CVE-2020-9979 (published 2020-10-27)
A trust issue was addressed by removing a legacy API. This issue is fixed in iOS 14.0 and iPadOS 14.0, tvOS 14.0. An attacker may be able to misuse a trust relationship to download malicious content.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Affected vendors: apple
Affected products: ipados, iphone_os, tvos
CVE-2020-9980 (published 2020-10-22)
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 13.6 and iPadOS 13.6, macOS Catalina 10.15.6, tvOS 13.4.8, watchOS 6.2.8. Processing a maliciously crafted font file may lead to arbitrary code execution.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-787
Affected vendors: apple
Affected products: ipados, iphone_os, mac_os_x, tvos, watchos
CVE-2020-9981 (published 2020-12-08)
A use after free issue was addressed with improved memory management. This issue is fixed in watchOS 7.0, iOS 14.0 and iPadOS 14.0, iTunes for Windows 12.10.9, iCloud for Windows 11.5, tvOS 14.0, macOS Catalina 10.15.7, Security Update 2020-005 High Sierra, Security Update 2020-005 Mojave. Processing a maliciously crafted file may lead to arbitrary code execution.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-416
Affected vendors: apple
Affected products: icloud, ipados, iphone_os, itunes, mac_os_x, tvos, watchos
CVE-2020-9982 (published 2020-10-27)
This issue was addressed with improved checks to prevent unauthorized actions. This issue is fixed in Apple Music 3.4.0 for Android. A malicious application may be able to leak a user's credentials.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N)
Affected vendors: apple
Affected products: music
CVE-2020-9983 (published 2020-10-16)
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in Safari 14.0. Processing maliciously crafted web content may lead to code execution.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-787
Affected vendors: apple, fedoraproject
Affected products: fedora, icloud, ipados, iphone_os, itunes, safari, tvos, watchos
CVE-2020-9984 (published 2020-10-22)
An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 13.6 and iPadOS 13.6, macOS Catalina 10.15.6, tvOS 13.4.8, watchOS 6.2.8, iTunes 12.10.8 for Windows, iCloud for Windows 11.3, iCloud for Windows 7.20. Processing a maliciously crafted image may lead to arbitrary code execution.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-125
Affected vendors: apple
Affected products: icloud, ipados, iphone_os, itunes, mac_os_x, tvos, watchos
CVE-2020-9985 (published 2020-10-22)
A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 13.6 and iPadOS 13.6, macOS Catalina 10.15.6, watchOS 6.2.8. Processing a maliciously crafted USD file may lead to unexpected application termination or arbitrary code execution.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-120
Affected vendors: apple
Affected products: ipados, iphone_os, mac_os_x, watchos
CVE-2020-9986 (published 2020-10-22)
A file access issue existed with certain home folder files. This was addressed with improved access restrictions. This issue is fixed in macOS Catalina 10.15.7. A malicious application may be able to read sensitive location information.
Severity: LOW (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N)
Affected vendors: apple
Affected products: mac_os_x
CVE-2020-9987 (published 2020-12-08)
An inconsistent user interface issue was addressed with improved state management. This issue is fixed in Safari 14.0. Visiting a malicious website may lead to address bar spoofing.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N)
Weakness: CWE-1021
Affected vendors: apple
Affected products: safari
CVE-2020-9988 (published 2020-12-08)
The issue was addressed with improved deletion. This issue is fixed in macOS Big Sur 11.0.1, iOS 14.0 and iPadOS 14.0. A local user may be able to discover a user’s deleted messages.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Affected vendors: apple
Affected products: ipados, iphone_os, mac_os_x
CVE-2020-9989 (published 2020-12-08)
The issue was addressed with improved deletion. This issue is fixed in macOS Big Sur 11.0.1, watchOS 7.0, iOS 14.0 and iPadOS 14.0. A local user may be able to discover a user’s deleted messages.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Affected vendors: apple
Affected products: ipados, iphone_os, mac_os_x, watchos
CVE-2020-9990 (published 2020-10-22)
A race condition was addressed with additional validation. This issue is fixed in macOS Catalina 10.15.6. A malicious application may be able to execute arbitrary code with kernel privileges.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H)
Weakness: CWE-362
Affected vendors: apple
Affected products: mac_os_x
CVE-2020-9991 (published 2020-12-08)
This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.0.1, watchOS 7.0, iOS 14.0 and iPadOS 14.0, iCloud for Windows 7.21, tvOS 14.0. A remote attacker may be able to cause a denial of service.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Affected vendors: apple
Affected products: icloud, ipados, iphone_os, mac_os_x, tvos, watchos
CVE-2020-9992 (published 2020-10-16)
This issue was addressed by encrypting communications over the network to devices running iOS 14, iPadOS 14, tvOS 14, and watchOS 7. This issue is fixed in iOS 14.0 and iPadOS 14.0, Xcode 12.0. An attacker in a privileged network position may be able to execute arbitrary code on a paired device during a debug session over the network.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Affected vendors: apple
Affected products: ipados, iphone_os, xcode
CVE-2020-9993 (published 2020-12-08)
The issue was addressed with improved UI handling. This issue is fixed in watchOS 7.0, Safari 14.0, iOS 14.0 and iPadOS 14.0. Visiting a malicious website may lead to address bar spoofing.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N)
Weakness: CWE-1021
Affected vendors: apple
Affected products: ipados, iphone_os, safari, watchos
CVE-2020-9994 (published 2020-10-22)
A path handling issue was addressed with improved validation. This issue is fixed in iOS 13.5 and iPadOS 13.5, macOS Catalina 10.15.5, tvOS 13.4.5, watchOS 6.2.5. A malicious application may be able to overwrite arbitrary files.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H)
Affected vendors: apple
Affected products: ipados, iphone_os, mac_os_x, tvos, watchos
CVE-2020-9995 (published 2021-04-02)
An issue existed in the parsing of URLs. This issue was addressed with improved input validation. This issue is fixed in macOS Server 5.11. Processing a maliciously crafted URL may lead to an open redirect or cross site scripting.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: apple
Affected products: macos_server
CVE-2020-9996 (published 2020-12-08)
A use after free issue was addressed with improved memory management. This issue is fixed in macOS Big Sur 11.0.1, iOS 14.0 and iPadOS 14.0. A malicious application may be able to elevate privileges.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-416
Affected vendors: apple
Affected products: ipados, iphone_os, mac_os_x
CVE-2020-9997 (published 2020-10-22)
An information disclosure issue was addressed with improved state management. This issue is fixed in macOS Catalina 10.15.6, watchOS 6.2.8. A malicious application may disclose restricted memory.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N)
Affected vendors: apple
Affected products: mac_os_x, watchos
CVE-2020-9999 (published 2020-12-08)
A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.0.1, iTunes for Windows 12.10.9. Processing a maliciously crafted text file may lead to arbitrary code execution.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-787
Affected vendors: apple
Affected products: icloud, ipados, iphone_os, itunes, mac_os_x, tvos, watchos
CVE-2021-0001 (published 2021-06-09)
Observable timing discrepancy in Intel(R) IPP before version 2020 update 1 may allow authorized user to potentially enable information disclosure via local access.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-203
Affected vendors: intel
Affected products: integrated_performance_primitives_cryptography, sgx_dcap, sgx_psw, sgx_sdk
CVE-2021-0002 (published 2021-08-11)
Improper conditions check in some Intel(R) Ethernet Controllers 800 series Linux drivers before version 1.4.11 may allow an authenticated user to potentially enable information disclosure or denial of service via local access.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H)
Weakness: CWE-754
Affected vendors: fedoraproject, intel
Affected products: ethernet_controller_e810, ethernet_controller_e810_firmware, fedora
CVE-2021-0003 (published 2021-08-11)
Improper conditions check in some Intel(R) Ethernet Controllers 800 series Linux drivers before version 1.4.11 may allow an authenticated user to potentially enable information disclosure via local access.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-755
Affected vendors: intel
Affected products: ethernet_controller_e810, ethernet_controller_e810_firmware
CVE-2021-0004 (published 2021-08-11)
Improper buffer restrictions in the firmware of Intel(R) Ethernet Adapters 800 Series Controllers and associated adapters before version 1.5.3.0 may allow a privileged user to potentially enable denial of service via local access.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-119
Affected vendors: fedoraproject, intel
Affected products: ethernet_controller_e810, ethernet_controller_e810_firmware, fedora
CVE-2021-0005 (published 2021-08-11)
Uncaught exception in firmware for Intel(R) Ethernet Adapters 800 Series Controllers and associated adapters before version 1.5.3.0 may allow a privileged user to potentially enable denial of service via local access.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-755
Affected vendors: intel
Affected products: ethernet_controller_e810, ethernet_controller_e810_firmware
CVE-2021-0006 (published 2021-08-11)
Improper conditions check in firmware for Intel(R) Ethernet Adapters 800 Series Controllers and associated adapters before version 1.5.4.0 may allow a privileged user to potentially enable denial of service via local access.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-755
Affected vendors: intel
Affected products: ethernet_controller_e810, ethernet_controller_e810_firmware
CVE-2021-0007 (published 2021-08-11)
Uncaught exception in firmware for Intel(R) Ethernet Adapters 800 Series Controllers and associated adapters before version 1.5.1.0 may allow a privileged attacker to potentially enable denial of service via local access.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-755
Affected vendors: intel
Affected products: ethernet_controller_e810, ethernet_controller_e810_firmware
CVE-2021-0008 (published 2021-08-11)
Uncontrolled resource consumption in firmware for Intel(R) Ethernet Adapters 800 Series Controllers and associated adapters before version 1.5.3.0 may allow privileged user to potentially enable denial of service via local access.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-400
Affected vendors: intel
Affected products: ethernet_controller_e810, ethernet_controller_e810_firmware
CVE-2021-0009 (published 2021-08-11)
Out-of-bounds read in the firmware for Intel(R) Ethernet Adapters 800 Series Controllers and associated adapters before version 1.5.3.0 may allow an unauthenticated user to potentially enable denial of service via adjacent access.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-125
Affected vendors: intel
Affected products: ethernet_controller_e810, ethernet_controller_e810_firmware
CVE-2021-0012 (published 2021-08-11)
Use after free in some Intel(R) Graphics Driver before version 27.20.100.8336, 15.45.33.5164, and 15.40.47.5166 may allow an authenticated user to potentially enable denial of service via local access.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-416
Affected vendors: intel, microsoft
Affected products: graphics_driver, graphics_drivers, windows
CVE-2021-0013 (published 2021-11-17)
Improper input validation for Intel(R) EMA before version 1.5.0 may allow an unauthenticated user to potentially enable denial of service via network access.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-20
Affected vendors: intel
Affected products: endpoint_management_assistant
CVE-2021-0051 (published 2021-06-09)
Improper input validation in the Intel(R) SPS versions before SPS_E5_04.04.04.023.0, SPS_E5_04.04.03.228.0 or SPS_SoC-A_05.00.03.098.0 may allow a privileged user to potentially enable denial of service via local access.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-20
Affected vendors: intel
Affected products: atom_p5921b, atom_p5931b, atom_p5942b, atom_p5962b, c621, c622, c624, c624a, c625, c626, c627, c627a, c628, c629, c629a, server_platform_services
CVE-2021-0052 (published 2021-06-09)
Incorrect default privileges in the Intel(R) Computing Improvement Program before version 2.4.6522 may allow an authenticated user to potentially enable an escalation of privilege via local access.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-269
Affected vendors: intel
Affected products: computing_improvement_program
CVE-2021-0053 (published 2021-11-17)
Improper initialization in firmware for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi in Windows 10 may allow an authenticated user to potentially enable information disclosure via adjacent access.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-665
Affected vendors: intel
Affected products: 7265, 7265_firmware, ac1550, ac1550_firmware, ac_3165, ac_3165_firmware, ac_3168, ac_3168_firmware, ac_8260, ac_8260_firmware, ac_8265, ac_8265_firmware, ac_9260, ac_9260_firmware, ac_9461, ac_9461_firmware, ac_9462, ac_9462_firmware, ac_9560, ac_9560_firmware, ax1650, ax1650_firmware, ax1675, ax1675_firmware, ax200
CVE-2021-0054 (published 2021-06-09)
Improper buffer restrictions in system firmware for some Intel(R) NUCs may allow a privileged user to potentially enable escalation of privilege via local access.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-119
Affected vendors: intel
Affected products: nuc_10_performance_kit_nuc10i3fnh, nuc_10_performance_kit_nuc10i3fnh_firmware, nuc_10_performance_kit_nuc10i3fnhf, nuc_10_performance_kit_nuc10i3fnhf_firmware, nuc_10_performance_kit_nuc10i3fnk, nuc_10_performance_kit_nuc10i3fnk_firmware, nuc_10_performance_kit_nuc10i5fnh, nuc_10_performance_kit_nuc10i5fnh_firmware, nuc_10_performance_kit_nuc10i5fnhf, nuc_10_performance_kit_nuc10i5fnhf_firmware, nuc_10_performance_kit_nuc10i5fnhj, nuc_10_performance_kit_nuc10i5fnhj_firmware, nuc_10_performance_kit_nuc10i5fnk, nuc_10_performance_kit_nuc10i5fnk_firmware, nuc_10_performance_kit_nuc10i5fnkp, nuc_10_performance_kit_nuc10i5fnkp_firmware, nuc_10_performance_kit_nuc10i7fnh, nuc_10_performance_kit_nuc10i7fnh_firmware, nuc_10_performance_kit_nuc10i7fnhc, nuc_10_performance_kit_nuc10i7fnhc_firmware, nuc_10_performance_kit_nuc10i7fnk, nuc_10_performance_kit_nuc10i7fnk_firmware, nuc_10_performance_kit_nuc10i7fnkp, nuc_10_performance_kit_nuc10i7fnkp_firmware, nuc_10_performance_mini_pc_nuc10i3fnhfa
CVE-2021-0055 (published 2021-06-09)
Insecure inherited permissions for some Intel(R) NUC 9 Extreme Laptop Kit LAN Drivers before version 10.42 may allow an authenticated user to potentially enable escalation of privilege via local access.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-732
Affected vendors: intel
Affected products: lapqc71a, lapqc71a_firmware, lapqc71b, lapqc71b_firmware, lapqc71c, lapqc71c_firmware, lapqc71d, lapqc71d_firmware
CVE-2021-0056 (published 2021-06-09)
Insecure inherited permissions for the Intel(R) NUC M15 Laptop Kit Driver Pack software before updated version 1.1 may allow an authenticated user to potentially enable escalation of privilege via local access.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-732
Affected vendors: intel
Affected products: lapbc510, lapbc510_firmware, lapbc710, lapbc710_firmware
CVE-2021-0057 (published 2021-06-09)
Uncontrolled search path in the Intel(R) NUC M15 Laptop Kit Driver Pack software before updated version 1.1 may allow an authenticated user to potentially enable escalation of privilege via local access.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-427
Affected vendors: intel
Affected products: lapbc510, lapbc510_firmware, lapbc710, lapbc710_firmware
CVE-2021-0058 (published 2021-06-09)
Incorrect default permissions in the Intel(R) NUC M15 Laptop Kit Driver Pack software before updated version 1.1 may allow an authenticated user to potentially enable escalation of privilege via local access.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-276
Affected vendors: intel
Affected products: lapbc510, lapbc510_firmware, lapbc710, lapbc710_firmware
CVE-2021-0060 (published 2022-02-09)
Insufficient compartmentalization in HECI subsystem for the Intel(R) SPS before versions SPS_E5_04.01.04.516.0, SPS_E5_04.04.04.033.0, SPS_E5_04.04.03.281.0, SPS_E5_03.01.03.116.0, SPS_E3_05.01.04.309.0, SPS_02.04.00.101.0, SPS_SoC-A_05.00.03.114.0, SPS_SoC-X_04.00.04.326.0, SPS_SoC-X_03.00.03.117.0, IGN_E5_91.00.00.167.0, SPS_PHI_03.01.03.078.0 may allow an authenticated user to potentially enable escalation of privilege via physical access.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Affected vendors: intel, netapp
Affected products: 11th_generation_core_series_firmware, atom_c3000_series_firmware, atom_c3308, atom_c3336, atom_c3338, atom_c3338r, atom_c3436l, atom_c3508, atom_c3538, atom_c3558, atom_c3558r, atom_c3708, atom_c3750, atom_c3758, atom_c3758r, atom_c3808, atom_c3830, atom_c3850, atom_c3858, atom_c3950, atom_c3955, atom_c3958, atom_c610_series_firmware, atom_c612, atom_p5000_series_firmware
CVE-2021-0061 (published 2021-08-11)
Improper initialization in some Intel(R) Graphics Driver before version 27.20.100.9030 may allow an authenticated user to potentially enable escalation of privilege via local access.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-665
Affected vendors: intel, microsoft
Affected products: graphics_drivers, windows
CVE-2021-0062 (published 2021-08-11)
Improper input validation in some Intel(R) Graphics Drivers before version 27.20.100.8935 may allow an authenticated user to potentially enable escalation of privilege via local access.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-20
Affected vendors: intel, microsoft
Affected products: graphics_drivers, windows
CVE-2021-0063 (published 2021-11-17)
Improper input validation in firmware for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi in Windows 10 may allow an unauthenticated user to potentially enable denial of service via adjacent access.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-20
Affected vendors: intel
Affected products: 7265, 7265_firmware, ac1550, ac1550_firmware, ac_3165, ac_3165_firmware, ac_3168, ac_3168_firmware, ac_8260, ac_8260_firmware, ac_8265, ac_8265_firmware, ac_9260, ac_9260_firmware, ac_9461, ac_9461_firmware, ac_9462, ac_9462_firmware, ac_9560, ac_9560_firmware, ax1650, ax1650_firmware, ax1675, ax1675_firmware, ax200
CVE-2021-0064 (published 2021-11-17)
Insecure inherited permissions in the Intel(R) PROSet/Wireless WiFi software installer for Windows 10 before version 22.40 may allow an authenticated user to potentially enable escalation of privilege via local access.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-732
Affected vendors: intel
Affected products: 7265, 7265_firmware, ac_3165, ac_3165_firmware, ac_3168, ac_3168_firmware, ac_8260, ac_8260_firmware, ac_8265, ac_8265_firmware, ac_9260, ac_9260_firmware, ac_9461, ac_9461_firmware, ac_9462, ac_9462_firmware, ac_9560, ac_9560_firmware, ax200, ax200_firmware, ax201, ax201_firmware, ax210, ax210_firmware
CVE-2021-0065 (published 2021-11-17)
Incorrect default permissions in the Intel(R) PROSet/Wireless WiFi software installer for Windows 10 before version 22.40 may allow an authenticated user to potentially enable escalation of privilege via local access.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-276
Affected vendors: intel
Affected products: 7265, 7265_firmware, 9260_firmware, ac_3165, ac_3165_firmware, ac_3168, ac_3168_firmware, ac_8260, ac_8260_firmware, ac_8265, ac_8265_firmware, ac_9260, ac_9260_firmware, ac_9461, ac_9461_firmware, ac_9462, ac_9462_firmware, ac_9560, ac_9560_firmware, ax200, ax200_firmware, ax201, ax201_firmware, ax210, ax210_firmware
CVE-2021-0066 (published 2022-02-09)
Improper input validation in firmware for Intel(R) PROSet/Wireless Wi-Fi in multiple operating systems and Killer(TM) Wi-Fi in Windows 10 and 11 may allow an unauthenticated user to potentially enable escalation of privilege via local access.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-20
Affected vendors: intel, microsoft
Affected products: amt_ac_8260, amt_ac_8260_firmware, amt_ac_8265, amt_ac_8265_firmware, amt_ac_9260, amt_ac_9260_firmware, amt_ac_9560, amt_ac_9560_firmware, amt_wi-fi_6_ax200, amt_wi-fi_6_ax200_firmware, amt_wi-fi_6_ax201, amt_wi-fi_6_ax201_firmware, amt_wi-fi_6_ax210, amt_wi-fi_6_ax210_firmware, killer_ac_1550, killer_ac_1550_firmware, killer_wi-fi_6_ax1650, killer_wi-fi_6_ax1650_firmware, killer_wi-fi_6e_ax1675, killer_wi-fi_6e_ax1675_firmware, proset_ac_3165, proset_ac_3165_firmware, proset_ac_3168, proset_ac_3168_firmware, proset_ac_8260
CVE-2021-0067 (published 2021-06-09)
&nbsp;Improper access control in system firmware for some Intel(R) NUCs may allow a privileged user to potentially enable escalation of privilege via local access.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Affected vendors: intel
Affected products: nuc_10_performance_kit_nuc10i3fnh, nuc_10_performance_kit_nuc10i3fnh_firmware, nuc_10_performance_kit_nuc10i3fnhf, nuc_10_performance_kit_nuc10i3fnhf_firmware, nuc_10_performance_kit_nuc10i3fnk, nuc_10_performance_kit_nuc10i3fnk_firmware, nuc_10_performance_kit_nuc10i5fnh, nuc_10_performance_kit_nuc10i5fnh_firmware, nuc_10_performance_kit_nuc10i5fnhf, nuc_10_performance_kit_nuc10i5fnhf_firmware, nuc_10_performance_kit_nuc10i5fnhj, nuc_10_performance_kit_nuc10i5fnhj_firmware, nuc_10_performance_kit_nuc10i5fnk, nuc_10_performance_kit_nuc10i5fnk_firmware, nuc_10_performance_kit_nuc10i5fnkp, nuc_10_performance_kit_nuc10i5fnkp_firmware, nuc_10_performance_kit_nuc10i7fnh, nuc_10_performance_kit_nuc10i7fnh_firmware, nuc_10_performance_kit_nuc10i7fnhc, nuc_10_performance_kit_nuc10i7fnhc_firmware, nuc_10_performance_kit_nuc10i7fnk, nuc_10_performance_kit_nuc10i7fnk_firmware, nuc_10_performance_kit_nuc10i7fnkp, nuc_10_performance_kit_nuc10i7fnkp_firmware, nuc_10_performance_mini_pc_nuc10i3fnhfa
CVE-2021-0069 (published 2021-11-17)
Improper input validation in firmware for some Intel(R) PROSet/Wireless WiFi in multiple operating systems and some Killer(TM) WiFi in Windows 10 may allow an unauthenticated user to potentially enable denial of service via adjacent access.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-20
Affected vendors: intel
Affected products: 7265, 7265_firmware, 9260_firmware, ac1550, ac1550_firmware, ac_3165, ac_3165_firmware, ac_3168, ac_3168_firmware, ac_8260, ac_8260_firmware, ac_8265, ac_8265_firmware, ac_9260, ac_9260_firmware, ac_9461, ac_9461_firmware, ac_9462, ac_9462_firmware, ac_9560, ac_9560_firmware, ax1650, ax1650_firmware, ax1675, ax1675_firmware
CVE-2021-0070 (published 2021-06-09)
Improper input validation in the BMC firmware for Intel(R) Server Board M10JNP2SB before version EFI BIOS 7215, BMC 8100.01.08 may allow an unauthenticated user to potentially enable an escalation of privilege via adjacent access.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-20
Affected vendors: intel
Affected products: efi_bios_7215, server_board_m10jnp2sb
CVE-2021-0071 (published 2021-11-17)
Improper input validation in firmware for some Intel(R) PROSet/Wireless WiFi in UEFI may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-20
Affected vendors: intel
Affected products: 7265, 7265_firmware, 9260_firmware, ac_3165, ac_3165_firmware, ac_3168, ac_3168_firmware, ac_8260, ac_8260_firmware, ac_8265, ac_8265_firmware, ac_9260, ac_9260_firmware, ac_9461, ac_9461_firmware, ac_9462, ac_9462_firmware, ac_9560, ac_9560_firmware, ax200, ax200_firmware, ax201, ax201_firmware, ax210, ax210_firmware
CVE-2021-0072 (published 2022-02-09)
Improper input validation in firmware for some Intel(R) PROSet/Wireless Wi-Fi in multiple operating systems and some Killer(TM) Wi-Fi in Windows 10 and 11 may allow a privileged user to potentially enable information disclosure via local access.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-20
Affected vendors: intel, microsoft
Affected products: amt_ac_8260, amt_ac_8260_firmware, amt_ac_8265, amt_ac_8265_firmware, amt_ac_9260, amt_ac_9260_firmware, amt_ac_9560, amt_ac_9560_firmware, amt_wi-fi_6_ax200, amt_wi-fi_6_ax200_firmware, amt_wi-fi_6_ax201, amt_wi-fi_6_ax201_firmware, amt_wi-fi_6_ax210, amt_wi-fi_6_ax210_firmware, killer_ac_1550, killer_ac_1550_firmware, killer_wi-fi_6_ax1650, killer_wi-fi_6_ax1650_firmware, killer_wi-fi_6e_ax1675, killer_wi-fi_6e_ax1675_firmware, proset_ac_3165, proset_ac_3165_firmware, proset_ac_3168, proset_ac_3168_firmware, proset_ac_8260
CVE-2021-0073 (published 2021-06-09)
Insufficient control flow management in Intel(R) DSA before version 20.11.50.9 may allow an authenticated user to potentially enable escalation of privilege via local access.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Affected vendors: intel
Affected products: driver_\&_support_assistant
CVE-2021-0074 (published 2021-06-09)
Improper permissions in the installer for the Intel(R) Computing Improvement Program software before version 2.4.5982 may allow an authenticated user to potentially enable escalation of privilege via local access.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-281
Affected vendors: intel
Affected products: computing_improvement_program
CVE-2021-0075 (published 2021-11-17)
Out-of-bounds write in firmware for some Intel(R) PROSet/Wireless WiFi in multiple operating systems and some Killer(TM) WiFi in Windows 10 may allow a privileged user to potentially enable denial of service via local access.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-787
Affected vendors: intel
Affected products: 7265, 7265_firmware, 9260_firmware, ac1550, ac1550_firmware, ac_3165, ac_3165_firmware, ac_3168, ac_3168_firmware, ac_8260, ac_8260_firmware, ac_8265, ac_8265_firmware, ac_9260, ac_9260_firmware, ac_9461, ac_9461_firmware, ac_9462, ac_9462_firmware, ac_9560, ac_9560_firmware, ax1650, ax1650_firmware, ax1675, ax1675_firmware
CVE-2021-0076 (published 2022-02-09)
Improper Validation of Specified Index, Position, or Offset in Input in firmware for some Intel(R) PROSet/Wireless Wi-Fi in multiple operating systems and some Killer(TM) Wi-Fi in Windows 10 and 11 may allow a privileged user to potentially enable denial of service via local access.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-20
Affected vendors: intel, microsoft
Affected products: amt_ac_8260, amt_ac_8260_firmware, amt_ac_8265, amt_ac_8265_firmware, amt_ac_9260, amt_ac_9260_firmware, amt_ac_9560, amt_ac_9560_firmware, amt_wi-fi_6_ax200, amt_wi-fi_6_ax200_firmware, amt_wi-fi_6_ax201, amt_wi-fi_6_ax201_firmware, amt_wi-fi_6_ax210, amt_wi-fi_6_ax210_firmware, killer_ac_1550, killer_ac_1550_firmware, killer_wi-fi_6_ax1650, killer_wi-fi_6_ax1650_firmware, killer_wi-fi_6e_ax1675, killer_wi-fi_6e_ax1675_firmware, proset_ac_3165, proset_ac_3165_firmware, proset_ac_3168, proset_ac_3168_firmware, proset_ac_8260
CVE-2021-0077 (published 2021-06-09)
Insecure inherited permissions in the installer for the Intel(R) VTune(TM) Profiler before version 2021.1.1 may allow an authenticated user to potentially enable escalation of privilege via local access.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-732
Affected vendors: intel
Affected products: vtune_profiler
CVE-2021-0078 (published 2021-11-17)
Improper input validation in software for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi in Windows 10 may allow an unauthenticated user to potentially enable denial of service or information disclosure via adjacent access.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H)
Weakness: CWE-20
Affected vendors: intel
Affected products: 7265, 7265_firmware, ac1550, ac1550_firmware, ac_3165, ac_3165_firmware, ac_3168, ac_3168_firmware, ac_8260, ac_8260_firmware, ac_8265, ac_8265_firmware, ac_9260, ac_9260_firmware, ac_9461, ac_9461_firmware, ac_9462, ac_9462_firmware, ac_9560, ac_9560_firmware, ax1650, ax1650_firmware, ax1675, ax1675_firmware, ax200
CVE-2021-0079 (published 2021-11-17)
Improper input validation in software for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi in Windows 10 may allow an unauthenticated user to potentially enable denial of service via adjacent access.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-20
Affected vendors: intel
Affected products: 7265, 7265_firmware, ac1550, ac1550_firmware, ac_3165, ac_3165_firmware, ac_3168, ac_3168_firmware, ac_8260, ac_8260_firmware, ac_8265, ac_8265_firmware, ac_9260, ac_9260_firmware, ac_9461, ac_9461_firmware, ac_9462, ac_9462_firmware, ac_9560, ac_9560_firmware, ax1650, ax1650_firmware, ax1675, ax1675_firmware, ax200
CVE-2021-0082 (published 2021-11-17)
Uncontrolled search path in software installer for Intel(R) PROSet/Wireless WiFi in Windows 10 may allow an authenticated user to potentially enable escalation of privilege via local access.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-427
Affected vendors: intel
Affected products: 7265, 7265_firmware, ac1550, ac1550_firmware, ac_3165, ac_3165_firmware, ac_3168, ac_3168_firmware, ac_8260, ac_8260_firmware, ac_8265, ac_8265_firmware, ac_9260, ac_9260_firmware, ac_9461, ac_9461_firmware, ac_9462, ac_9462_firmware, ac_9560, ac_9560_firmware, ax1650, ax1650_firmware, ax1675, ax1675_firmware, ax200
CVE-2021-0083 (published 2021-08-11)
Improper input validation in some Intel(R) Optane(TM) PMem versions before versions 1.2.0.5446 or 2.2.0.1547 may allow a privileged user to potentially enable denial of service via local access.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-20
Affected vendors: intel
Affected products: optane_persistent_memory_firmware, xeon_bronze_3204, xeon_bronze_3206r, xeon_gold_5215, xeon_gold_5215l, xeon_gold_5217, xeon_gold_5218, xeon_gold_5218b, xeon_gold_5218n, xeon_gold_5218r, xeon_gold_5218t, xeon_gold_5220, xeon_gold_5220r, xeon_gold_5220s, xeon_gold_5220t, xeon_gold_5222, xeon_gold_5315y, xeon_gold_5317, xeon_gold_5318h, xeon_gold_5318n, xeon_gold_5318s, xeon_gold_5318y, xeon_gold_5320, xeon_gold_5320h, xeon_gold_5320t
CVE-2021-0084 (published 2021-08-11)
Improper input validation in the Intel(R) Ethernet Controllers X722 and 800 series Linux RMDA driver before version 1.3.19 may allow an authenticated user to potentially enable escalation of privilege via local access.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-20
Affected vendors: intel
Affected products: ethernet_controller_e810, ethernet_controller_e810_firmware, x722da2, x722da2_firmware, x722da4fh, x722da4fh_firmware, x722da4g1p5, x722da4g1p5_firmware
CVE-2021-0086 (published 2021-06-09)
Observable response discrepancy in floating-point operations for some Intel(R) Processors may allow an authorized user to potentially enable information disclosure via local access.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N)
Weakness: CWE-203
Affected vendors: fedoraproject, intel
Affected products: brand_verification_tool, celeron_processors, celeron_processors_firmware, core_processors, core_processors_firmware, fedora, itanium_processors, itanium_processors_firmware, pentium_processors, pentium_processors_firmware, xeon_processors, xeon_processors_firmware
CVE-2021-0089 (published 2021-06-09)
Observable response discrepancy in some Intel(R) Processors may allow an authorized user to potentially enable information disclosure via local access.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N)
Weakness: CWE-203
Affected vendors: debian, fedoraproject, intel
Affected products: celeron_processors, celeron_processors_firmware, core_processors, core_processors_firmware, debian_linux, fedora, itanium_processors, itanium_processors_firmware, pentium_processors, pentium_processors_firmware, xeon_processors, xeon_processors_firmware
CVE-2021-0090 (published 2021-06-09)
Uncontrolled search path element in Intel(R) DSA before version 20.11.50.9 may allow an authenticated user to potentially enable an escalation of privilege via local access.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-427
Affected vendors: intel
Affected products: driver_\&_support_assistant
CVE-2021-0091 (published 2022-02-09)
Improper access control in the firmware for some Intel(R) Processors may allow an unauthenticated user to potentially enable an escalation of privilege via local access.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Affected vendors: intel, netapp
Affected products: atom_c3308, atom_c3336, atom_c3338, atom_c3338r, atom_c3436l, atom_c3508, atom_c3538, atom_c3558, atom_c3558r, atom_c3708, atom_c3750, atom_c3758, atom_c3758r, atom_c3808, atom_c3830, atom_c3850, atom_c3858, atom_c3950, atom_c3955, atom_c3958, cloud_backup, core_i3-1000g1, core_i3-1000g4, core_i3-1005g1, core_i3-10100
CVE-2021-0092 (published 2022-02-09)
Improper access control in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable a denial of service via local access.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-400
Affected vendors: intel, netapp
Affected products: atom_c3308, atom_c3336, atom_c3338, atom_c3338r, atom_c3436l, atom_c3508, atom_c3538, atom_c3558, atom_c3558r, atom_c3708, atom_c3750, atom_c3758, atom_c3758r, atom_c3808, atom_c3830, atom_c3850, atom_c3858, atom_c3950, atom_c3955, atom_c3958, cloud_backup, core_i3-1000g1, core_i3-1000g4, core_i3-1005g1, core_i3-10100
CVE-2021-0093 (published 2022-02-09)
Incorrect default permissions in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable a denial of service via local access.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-276
Affected vendors: intel, netapp
Affected products: atom_c3308, atom_c3336, atom_c3338, atom_c3338r, atom_c3436l, atom_c3508, atom_c3538, atom_c3558, atom_c3558r, atom_c3708, atom_c3750, atom_c3758, atom_c3758r, atom_c3808, atom_c3830, atom_c3850, atom_c3858, atom_c3950, atom_c3955, atom_c3958, cloud_backup, core_i3-1000g1, core_i3-1000g4, core_i3-1005g1, core_i3-10100