deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2024-7588
Published: 2024-08-14
Description: The Gutenberg Blocks, Page Builder – ComboBlocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Accordion block in all versions up to, and including, 2.2.87 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/changeset/3133880/post-grid; https://www.wordfence.com/threat-intel/vulnerabilities/id/248a9cb2-24e8-46b2-9ef8-23a8444a922d?source=cve
CVE: CVE-2024-7731
Published: 2024-08-14
Description: Dr.ID Access Control System from SECOM does not properly validate a specific page parameter, allowing unauthenticated remote attackers to inject SQL commands to read, modify, and delete database contents.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89, CWE-89
References: https://www.twcert.org.tw/en/cp-139-8006-036f5-2.html; https://www.twcert.org.tw/tw/cp-132-8005-c3c94-1.html
CVE: CVE-2024-7732
Published: 2024-08-14
Description: Dr.ID Access Control System from SECOM does not properly validate a specific page parameter, allowing unauthenticated remote attackers to inject SQL commands to read, modify, and delete database contents.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89, CWE-89
References: https://www.twcert.org.tw/en/cp-139-8008-32677-2.html; https://www.twcert.org.tw/tw/cp-132-8007-803d6-1.html
CVE: CVE-2024-41858
Published: 2024-08-14
Description: InCopy versions 18.5.2, 19.4 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-190
References: https://helpx.adobe.com/security/products/incopy/apsb24-64.html
CVE: CVE-2024-41860
Published: 2024-08-14
Description: Substance3D - Sampler versions 4.5 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://helpx.adobe.com/security/products/substance3d-sampler/apsb24-65.html
CVE: CVE-2024-41861
Published: 2024-08-14
Description: Substance3D - Sampler versions 4.5 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://helpx.adobe.com/security/products/substance3d-sampler/apsb24-65.html
CVE: CVE-2024-41862
Published: 2024-08-14
Description: Substance3D - Sampler versions 4.5 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125, CWE-125
References: https://helpx.adobe.com/security/products/substance3d-sampler/apsb24-65.html
CVE: CVE-2024-41863
Published: 2024-08-14
Description: Substance3D - Sampler versions 4.5 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://helpx.adobe.com/security/products/substance3d-sampler/apsb24-65.html
CVE: CVE-2024-41864
Published: 2024-08-14
Description: Substance3D - Designer versions 13.1.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://helpx.adobe.com/security/products/substance3d_designer/apsb24-67.html
CVE: CVE-2024-4389
Published: 2024-08-14
Description: The Slider and Carousel slider by Depicter plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the uploadFile function in all versions up to, and including, 3.1.1. This makes it possible for authenticated attackers, with contributor access or higher, to upload arbitrary files on the affected site's server which may make remote code execution possible.
CVSS Score: 8.8 (HIGH)
CWE: CWE-434
References: https://plugins.trac.wordpress.org/browser/depicter/trunk/app/src/WordPress/FileUploaderService.php#L28; https://plugins.trac.wordpress.org/changeset/3108589/depicter/trunk/app/src/WordPress/FileUploaderService.php; https://www.wordfence.com/threat-intel/vulnerabilities/id/81f025da-c28c-4a80-8b4f-27dae07b2b04?source=cve
CVE: CVE-2024-38483
Published: 2024-08-14
Description: Dell BIOS contains an Improper Input Validation vulnerability in an externally developed component. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Code execution.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-20
References: https://www.dell.com/support/kbdoc/en-us/000225776/dsa-2024-260
CVE: CVE-2024-6532
Published: 2024-08-14
Description: The Sheet to Table Live Sync for Google Sheet plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's STWT_Sheet_Table shortcode in all versions up to, and including, 1.0.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/browser/sheet-to-wp-table-for-google-sheet/trunk/app/service/post/meta-box.php#L81; https://plugins.trac.wordpress.org/changeset/3134934/; https://wordpress.org/plugins/sheet-to-wp-table-for-google-sheet/#developers
CVE: CVE-2024-39397
Published: 2024-08-14
Description: Adobe Commerce versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by an Unrestricted Upload of File with Dangerous Type vulnerability that could result in arbitrary code execution by an attacker. An attacker could exploit this vulnerability by uploading a malicious file which can then be executed on the server. Exploitation of this issue does not require user interaction, but attack complexity is high and scope is changed.
CVSS Score: 9.0 (CRITICAL)
CWE: CWE-434
References: https://helpx.adobe.com/security/products/magento/apsb24-61.html
CVE: CVE-2024-39398
Published: 2024-08-14
Description: Adobe Commerce versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by an Improper Restriction of Excessive Authentication Attempts vulnerability that could result in a security feature bypass. An attacker could exploit this vulnerability to perform brute force attacks and potentially gain unauthorized access to accounts. Exploitation of this issue does not require user interaction, but attack complexity is high.
CVSS Score: 7.4 (HIGH)
CWE: CWE-307
References: https://helpx.adobe.com/security/products/magento/apsb24-61.html
CVE: CVE-2024-39399
Published: 2024-08-14
Description: Adobe Commerce versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could lead to arbitrary file system read. A low-privileged attacker could exploit this vulnerability to gain access to files and directories that are outside the restricted directory. Exploitation of this issue does not require user interaction and scope is changed.
CVSS Score: 7.7 (HIGH)
CWE: CWE-22
References: https://helpx.adobe.com/security/products/magento/apsb24-61.html
CVE: CVE-2024-39400
Published: 2024-08-14
Description: Adobe Commerce versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. This vulnerability could allow an admin attacker to inject and execute arbitrary JavaScript code within the context of the user's browser session. Exploitation of this issue requires user interaction, such as convincing a victim to click on a malicious link. Confidentiality and integrity impact is high as it affects other admin accounts.
CVSS Score: 8.1 (HIGH)
CWE: CWE-79
References: https://helpx.adobe.com/security/products/magento/apsb24-61.html
CVE: CVE-2024-39401
Published: 2024-08-14
Description: Adobe Commerce versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability that could lead in arbitrary code execution by an admin attacker. Exploitation of this issue requires user interaction and scope is changed.
CVSS Score: 8.4 (HIGH)
CWE: CWE-78
References: https://helpx.adobe.com/security/products/magento/apsb24-61.html
CVE: CVE-2024-39402
Published: 2024-08-14
Description: Adobe Commerce versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability that could lead in arbitrary code execution by an admin attacker. Exploitation of this issue requires user interaction and scope is changed.
CVSS Score: 8.4 (HIGH)
CWE: CWE-78
References: https://helpx.adobe.com/security/products/magento/apsb24-61.html
CVE: CVE-2024-39403
Published: 2024-08-14
Description: Adobe Commerce versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page containing the vulnerable field. Confidentiality impact is high due to the attacker being able to exfiltrate sensitive information.
CVSS Score: 7.6 (HIGH)
CWE: CWE-79
References: https://helpx.adobe.com/security/products/magento/apsb24-61.html
CVE: CVE-2024-39404
Published: 2024-08-14
Description: Adobe Commerce versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by an Improper Authorization vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and modify minor information. Exploitation of this issue does not require user interaction.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-285
References: https://helpx.adobe.com/security/products/magento/apsb24-61.html
CVE: CVE-2024-39405
Published: 2024-08-14
Description: Adobe Commerce versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by an Improper Authorization vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and modify minor information. Exploitation of this issue does not require user interaction.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-285
References: https://helpx.adobe.com/security/products/magento/apsb24-61.html
CVE: CVE-2024-39406
Published: 2024-08-14
Description: Adobe Commerce versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could lead to arbitrary file system read. An admin attacker could exploit this vulnerability to gain access to files and directories that are outside the restricted directory. Exploitation of this issue does not require user interaction and scope is changed.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-22, CWE-22
References: https://helpx.adobe.com/security/products/magento/apsb24-61.html
CVE: CVE-2024-39407
Published: 2024-08-14
Description: Adobe Commerce versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by an Improper Authorization vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and modify minor information. Exploitation of this issue does not require user interaction.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-285
References: https://helpx.adobe.com/security/products/magento/apsb24-61.html
CVE: CVE-2024-39408
Published: 2024-08-14
Description: Adobe Commerce versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by a Cross-Site Request Forgery (CSRF) vulnerability that could allow an attacker to bypass security features and perform minor integrity changeson behalf of a user. The vulnerability could be exploited by tricking a victim into clicking a link or loading a page that submits a malicious request. Exploitation of this issue requires user interaction.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: https://helpx.adobe.com/security/products/magento/apsb24-61.html
CVE: CVE-2024-39409
Published: 2024-08-14
Description: Adobe Commerce versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by a Cross-Site Request Forgery (CSRF) vulnerability that could allow an attacker to bypass security features and perform minor integrity changes on behalf of a user. The vulnerability could be exploited by tricking a victim into clicking a link or loading a page that submits a malicious request. Exploitation of this issue requires user interaction.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: https://helpx.adobe.com/security/products/magento/apsb24-61.html
CVE: CVE-2024-39410
Published: 2024-08-14
Description: Adobe Commerce versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by a Cross-Site Request Forgery (CSRF) vulnerability that could allow an attacker to bypass security features and perform minor integrity changes on behalf of a user. The vulnerability could be exploited by tricking a victim into clicking a link or loading a page that submits a malicious request. Exploitation of this issue does not require user interaction.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: https://helpx.adobe.com/security/products/magento/apsb24-61.html
CVE: CVE-2024-39411
Published: 2024-08-14
Description: Adobe Commerce versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by an Improper Authorization vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and disclose minor information. Exploitation of this issue does not require user interaction.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-285
References: https://helpx.adobe.com/security/products/magento/apsb24-61.html
CVE: CVE-2024-39412
Published: 2024-08-14
Description: Adobe Commerce versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by an Improper Authorization vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and perform a minor integrity change. Exploitation of this issue does not require user interaction.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-285
References: https://helpx.adobe.com/security/products/magento/apsb24-61.html
CVE: CVE-2024-39413
Published: 2024-08-14
Description: Adobe Commerce versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by an Improper Authorization vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and disclose minor information. Exploitation of this issue does not require user interaction.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-285
References: https://helpx.adobe.com/security/products/magento/apsb24-61.html
CVE: CVE-2024-39414
Published: 2024-08-14
Description: Adobe Commerce versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by an Improper Authorization vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and disclose minor information. Exploitation of this issue does not require user interaction.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-284
References: https://helpx.adobe.com/security/products/magento/apsb24-61.html
CVE: CVE-2024-39415
Published: 2024-08-14
Description: Adobe Commerce versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by an Improper Authorization vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and disclose minor information. Exploitation of this issue does not require user interaction.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-285
References: https://helpx.adobe.com/security/products/magento/apsb24-61.html
CVE: CVE-2024-39416
Published: 2024-08-14
Description: Adobe Commerce versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by an Improper Authorization vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and disclose minor information. Exploitation of this issue does not require user interaction.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-285
References: https://helpx.adobe.com/security/products/magento/apsb24-61.html
CVE: CVE-2024-39417
Published: 2024-08-14
Description: Adobe Commerce versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by an Improper Authorization vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and disclose minor information. Exploitation of this issue does not require user interaction.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-285
References: https://helpx.adobe.com/security/products/magento/apsb24-61.html
CVE: CVE-2024-39418
Published: 2024-08-14
Description: Adobe Commerce versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by an Improper Authorization vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures to view and edit low-sensitivity information. Exploitation of this issue does not require user interaction.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-285
References: https://helpx.adobe.com/security/products/magento/apsb24-61.html
CVE: CVE-2024-39419
Published: 2024-08-14
Description: Adobe Commerce versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by an Improper Authorization vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and modify minor information. Exploitation of this issue does not require user interaction.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-285
References: https://helpx.adobe.com/security/products/magento/apsb24-61.html
CVE: CVE-2023-34424
Published: 2024-08-14
Description: Improper input validation in firmware for some Intel(R) CSME may allow a privileged user to potentially enable denial of service via local access.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-20
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00999.html; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2023-35123
Published: 2024-08-14
Description: Uncaught exception in OpenBMC Firmware for some Intel(R) Server Platforms before versions egs-1.14-0, bhs-0.27 may allow an authenticated user to potentially enable denial of service via network access.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-600
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01078.html
CVE: CVE-2023-38655
Published: 2024-08-14
Description: Improper buffer restrictions in firmware for some Intel(R) AMT and Intel(R) Standard Manageability may allow a privileged user to potentially enable denial of service via network access.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-92
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00999.html
CVE: CVE-2023-40067
Published: 2024-08-14
Description: Unchecked return value in firmware for some Intel(R) CSME may allow an unauthenticated user to potentially enable escalation of privilege via physical access.
CVSS Score: 5.7 (MEDIUM)
CWE: CWE-252
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00999.html; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2023-42667
Published: 2024-08-14
Description: Improper isolation in the Intel(R) Core(TM) Ultra Processor stream cache mechanism may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 7.8 (HIGH)
CWE: CWE-1189
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01038.html
CVE: CVE-2023-43489
Published: 2024-08-14
Description: Improper access control for some Intel(R) CIP software before version 2.4.10717 may allow an authenticated user to potentially enable denial of service via local access.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-284
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01112.html
CVE: CVE-2023-43747
Published: 2024-08-14
Description: Incorrect default permissions for some Intel(R) Connectivity Performance Suite software installers before version 2.0 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-276
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01102.html
CVE: CVE-2023-48361
Published: 2024-08-14
Description: Improper initialization in firmware for some Intel(R) CSME may allow a privileged user to potentially enable information disclosure via local access.
CVSS Score: 2.3 (LOW)
CWE: CWE-665
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00999.html; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2023-49141
Published: 2024-08-14
Description: Improper isolation in some Intel(R) Processors stream cache mechanism may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 7.8 (HIGH)
CWE: CWE-1189
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01046.html; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2023-49144
Published: 2024-08-14
Description: Out of bounds read in OpenBMC Firmware for some Intel(R) Server Platforms before versions egs-1.15-0, bhs-0.27 may allow a privileged user to potentially enable information disclosure via local access.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-125
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01078.html
CVE: CVE-2024-21766
Published: 2024-08-14
Description: Uncontrolled search path for some Intel(R) oneAPI Math Kernel Library software before version 2024.1 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-427
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01072.html
CVE: CVE-2024-21769
Published: 2024-08-14
Description: Uncontrolled search path in some Intel(R) Ethernet Connection I219-LM install software may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-427
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00918.html