deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2025-22391
Published: 2025-11-11
Description: Improper access control for some SigTest before version 6.1.10 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are present without special internal knowledge and requires active user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-284
References: https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01327.html
CVE: CVE-2025-23357
Published: 2025-11-11
Description: NVIDIA Megatron-LM for all platforms contains a vulnerability in a script, where malicious data created by an attacker may cause a code injection issue. A successful exploit of this vulnerability may lead to code execution, escalation of privileges, information disclosure, data tampering.
CVSS Score: 7.8 (HIGH)
CWE: CWE-94
References: https://nvd.nist.gov/vuln/detail/CVE-2025-23357; https://nvidia.custhelp.com/app/answers/detail/a_id/5712; https://www.cve.org/CVERecord?id=CVE-2025-23357
CVE: CVE-2025-23361
Published: 2025-11-11
Description: NVIDIA NeMo Framework for all platforms contains a vulnerability in a script, where malicious input created by an attacker may cause improper control of code generation. A successful exploit of this vulnerability may lead to code execution, escalation of privileges, information disclosure, and data tampering.
CVSS Score: 7.8 (HIGH)
CWE: CWE-94
References: https://nvd.nist.gov/vuln/detail/CVE-2025-23361; https://nvidia.custhelp.com/app/answers/detail/a_id/5718; https://www.cve.org/CVERecord?id=CVE-2025-23361
CVE: CVE-2025-24299
Published: 2025-11-11
Description: Improper input validation for some Intel(R) CIP software before version WIN_DCA_2.4.0.11001 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable escalation of privilege. This result may potentially occur via network access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.
CVSS Score: 8.8 (HIGH)
CWE: CWE-20
References: https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01328.html
CVE: CVE-2025-24307
Published: 2025-11-11
Description: Improper privilege management for some Intel(R) CIP software before version WIN_DCA_2.4.0.11001 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable data manipulation. This result may potentially occur via network access when attack requirements are present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (low) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.
CVSS Score: 2.0 (LOW)
CWE: CWE-269
References: https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01328.html
CVE: CVE-2025-24314
Published: 2025-11-11
Description: Improper access control for some Intel(R) CIP software before version WIN_DCA_2.4.0.11001 within Ring 3: User Applications may allow an information disclosure. Unprivileged software adversary with a privileged user combined with a high complexity attack may enable data exposure. This result may potentially occur via network access when attack requirements are present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (low), integrity (none) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.
CVSS Score: 2.2 (LOW)
CWE: CWE-284
References: https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01328.html
CVE: CVE-2025-24327
Published: 2025-11-11
Description: Insecure inherited permissions for some Intel(R) Rapid Storage Technology Application before version 20.0.1021 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable local code execution. This result may potentially occur via local access when attack requirements are present without special internal knowledge and requires active user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-277
References: https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01362.html
CVE: CVE-2025-24491
Published: 2025-11-11
Description: Uncontrolled search path for some Intel(R) Killer(TM) Performance Suite software before version killer 4.0 40.25.509.1465 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are present without special internal knowledge and requires active user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-427
References: https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01377.html
CVE: CVE-2025-24512
Published: 2025-11-11
Description: Improper input validation for some Intel(R) PROSet/Wireless WiFi Software for Windows before version 23.160 within Ring 2: Device Drivers may allow a denial of service. Authorized adversary with an authenticated user combined with a high complexity attack may enable denial of service. This result may potentially occur via local access when attack requirements are present with special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (none) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (low) impacts.
CVSS Score: 5.6 (MEDIUM)
CWE: CWE-20
References: https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01398.html
CVE: CVE-2025-24516
Published: 2025-11-11
Description: Improper access control for some Intel(R) CIP software before version WIN_DCA_2.4.0.11001 within Ring 3: User Applications may allow an information disclosure. Unprivileged software adversary with a privileged user combined with a low complexity attack may enable data exposure. This result may potentially occur via adjacent access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (high), integrity (none) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.
CVSS Score: 4.5 (MEDIUM)
CWE: CWE-284
References: https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01328.html
CVE: CVE-2025-24519
Published: 2025-11-11
Description: Buffer overflow for some Intel(R) QAT Windows software before version 2.6.0. within Ring 3: User Applications may allow an escalation of privilege. System software adversary with an authenticated user combined with a low complexity attack may enable data manipulation. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (high) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-120
References: https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01373.html
CVE: CVE-2025-24834
Published: 2025-11-11
Description: Protection mechanism failure for some Intel(R) CIP software before version WIN_DCA_2.4.0.11001 within Ring 3: User Applications may allow an information disclosure. Unprivileged software adversary with an unauthenticated user combined with a low complexity attack may enable data exposure. This result may potentially occur via adjacent access when attack requirements are present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (high), integrity (none) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-693
References: https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01328.html
CVE: CVE-2025-24838
Published: 2025-11-11
Description: Improper privilege management for some Intel(R) CIP software before version WIN_DCA_2.4.0.11001 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable escalation of privilege. This result may potentially occur via network access when attack requirements are present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.
CVSS Score: 8.8 (HIGH)
CWE: CWE-269
References: https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01328.html
CVE: CVE-2025-24842
Published: 2025-11-11
Description: Uncontrolled search path for the Intel(R) System Support Utility before version 4.1.0 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with a privileged user combined with a high complexity attack may enable local code execution. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires passive user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-427
References: https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01360.html
CVE: CVE-2025-24847
Published: 2025-11-11
Description: Improper input validation for some Intel(R) CIP software before version WIN_DCA_2.4.0.11001 within Ring 3: User Applications may allow an information disclosure. Unprivileged software adversary with a privileged user combined with a low complexity attack may enable data exposure. This result may potentially occur via network access when attack requirements are present without special internal knowledge and requires passive user interaction. The potential vulnerability may impact the confidentiality (high), integrity (none) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.
CVSS Score: 4.5 (MEDIUM)
CWE: CWE-20
References: https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01328.html
CVE: CVE-2025-24848
Published: 2025-11-11
Description: Protection mechanism failure for some Intel(R) CIP software before version WIN_DCA_2.4.0.11001 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with a privileged user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are present without special internal knowledge and requires passive user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-693
References: https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01328.html
CVE: CVE-2025-24862
Published: 2025-11-11
Description: Unrestricted upload of file with dangerous type for some Intel(R) CIP software before version WIN_DCA_2.4.0.11001 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with a privileged user combined with a high complexity attack may enable data manipulation. This result may potentially occur via network access when attack requirements are present with special internal knowledge and requires passive user interaction. The potential vulnerability may impact the confidentiality (none), integrity (low) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.
CVSS Score: 2.0 (LOW)
CWE: CWE-434
References: https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01328.html
CVE: CVE-2025-24863
Published: 2025-11-11
Description: Improper privilege management for some Intel(R) CIP software before version WIN_DCA_2.4.0.11001 within Ring 3: User Applications may allow an information disclosure. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable data exposure. This result may potentially occur via network access when attack requirements are present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (high), integrity (none) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-269
References: https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01328.html
CVE: CVE-2025-24918
Published: 2025-11-11
Description: Improper link resolution before file access ('link following') for some Intel(R) Server Configuration Utility software and Intel(R) Server Firmware Update Utility software before version 16.0.12. within Ring 3: User Applications may allow an escalation of privilege. System software adversary with an authenticated user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are present without special internal knowledge and requires active user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-59
References: https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01400.html
CVE: CVE-2025-25059
Published: 2025-11-11
Description: Uncontrolled search path for some Intel(R) One Boot Flash Update (Intel(R) OFU) software before version 14.1.31 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are present without special internal knowledge and requires active user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-427
References: https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01331.html
CVE: CVE-2025-25216
Published: 2025-11-11
Description: Improper input validation in some firmware for some Intel(R) Graphics Drivers and Intel LTS kernels within Ring 1: Device Drivers may allow a denial of service. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via local access when attack requirements are present with special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (none) and availability (low) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.
CVSS Score: 3.3 (LOW)
CWE: CWE-20
References: https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01356.html
CVE: CVE-2025-26402
Published: 2025-11-11
Description: Protection mechanism failure for some Intel(R) NPU Drivers within Ring 3: User Applications may allow a denial of service. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (none) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-693
References: https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01304.html
CVE: CVE-2025-26405
Published: 2025-11-11
Description: Improper control of dynamically-managed code resources for some Intel(R) NPU Drivers within Ring 3: User Applications may allow a denial of service. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires passive user interaction. The potential vulnerability may impact the confidentiality (none), integrity (none) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-913
References: https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01304.html
CVE: CVE-2025-26694
Published: 2025-11-11
Description: Null pointer dereference for some Intel(R) QAT Windows software before version 2.6.0. within Ring 3: User Applications may allow a denial of service. System software adversary with an authenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (none) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01373.html
CVE: CVE-2025-27246
Published: 2025-11-11
Description: Incorrect default permissions for the Intel(R) Processor Identification Utility before version 8.0.43 within Ring 3: User Applications may allow an escalation of privilege. System software adversary with an authenticated user combined with a high complexity attack may enable local code execution. This result may potentially occur via local access when attack requirements are present without special internal knowledge and requires active user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-276
References: https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01334.html
CVE: CVE-2025-27249
Published: 2025-11-11
Description: Uncontrolled resource consumption for some Gaudi software before version 1.21.0 within Ring 3: User Applications may allow a denial of service. System software adversary with an authenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (none) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-400
References: https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01374.html
CVE: CVE-2025-27710
Published: 2025-11-11
Description: Untrusted pointer dereference for some Intel(R) QAT Windows software before version 2.6.0. within Ring 3: User Applications may allow an information disclosure. System software adversary with an authenticated user combined with a low complexity attack may enable data exposure. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (high), integrity (none) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-822
References: https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01373.html
CVE: CVE-2025-27711
Published: 2025-11-11
Description: Incorrect default permissions for some Intel(R) One Boot Flash Update (Intel(R) OFU) software before version 14.1.31 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are present without special internal knowledge and requires active user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-276
References: https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01331.html