deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2025-30329
Published: 2025-05-13
Description: Animate versions 24.0.8, 23.0.11 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to crash the application, causing disruption of service. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: https://helpx.adobe.com/security/products/animate/apsb25-42.html
CVE: CVE-2025-30330
Published: 2025-05-13
Description: Illustrator versions 29.3, 28.7.5 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-122, CWE-787
References: https://helpx.adobe.com/security/products/illustrator/apsb25-43.html
CVE: CVE-2025-43545
Published: 2025-05-13
Description: Bridge versions 15.0.3, 14.1.6 and earlier are affected by an Access of Uninitialized Pointer vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-824
References: https://helpx.adobe.com/security/products/bridge/apsb25-44.html
CVE: CVE-2025-43546
Published: 2025-05-13
Description: Bridge versions 15.0.3, 14.1.6 and earlier are affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-191
References: https://helpx.adobe.com/security/products/bridge/apsb25-44.html
CVE: CVE-2025-43547
Published: 2025-05-13
Description: Bridge versions 15.0.3, 14.1.6 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-190
References: https://helpx.adobe.com/security/products/bridge/apsb25-44.html
CVE: CVE-2025-43555
Published: 2025-05-13
Description: Animate versions 24.0.8, 23.0.11 and earlier are affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-191
References: https://helpx.adobe.com/security/products/animate/apsb25-42.html
CVE: CVE-2025-43556
Published: 2025-05-13
Description: Animate versions 24.0.8, 23.0.11 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-190
References: https://helpx.adobe.com/security/products/animate/apsb25-42.html
CVE: CVE-2025-43557
Published: 2025-05-13
Description: Animate versions 24.0.8, 23.0.11 and earlier are affected by an Access of Uninitialized Pointer vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-824
References: https://helpx.adobe.com/security/products/animate/apsb25-42.html
CVE: CVE-2025-4660
Published: 2025-05-13
Description: A remote code execution vulnerability exists in the Windows agent component of SecureConnector due to improper access controls on a named pipe. The pipe is accessible to the Everyone group and does not restrict remote connections, allowing any network-based attacker to connect without authentication. By interacting with this pipe, an attacker can redirect the agent to communicate with a rogue server that can issue commands via the SecureConnector Agent. 



This does not impact Linux or OSX Secure Connector.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-276
References: https://forescout.my.site.com/support/s/article/
CVE: CVE-2025-3744
Published: 2025-05-13
Description: Nomad Enterprise (“Nomad”) jobs using the policy override option are bypassing the mandatory sentinel policies. This vulnerability, identified as CVE-2025-3744, is fixed in Nomad Enterprise 1.10.1, 1.9.9, and 1.8.13.
CVSS Score: 7.6 (HIGH)
CWE: CWE-266
References: https://discuss.hashicorp.com/t/hcsec-2025-08-nomad-enterprise-vulnerable-to-violation-of-mandatory-sentinel-policies-in-job-submissions-via-policy-override/74935
CVE: CVE-2025-45746
Published: 2025-05-13
Description: In ZKT ZKBio CVSecurity 6.4.1_R an unauthenticated attacker can craft JWT token using the hardcoded secret to authenticate to the service console. NOTE: the Supplier disputes the significance of this report because the service console is typically only accessible from a local area network, and because access to the service console does not result in login access or data access in the context of the application software platform.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-321, CWE-798
References: https://github.com/mrojz/ZKT-Bio-CVSecurity/blob/main/CVE-2025-45746.md
CVE: CVE-2025-45861
Published: 2025-05-13
Description: TOTOLINK A3002R v4.0.0-B20[PII_REDACTED] was discovered to contain a buffer overflow via the routername parameter in the formDnsv6 interface.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120, CWE-120
References: https://github.com/Jiangxiazhe/IOT_hack/blob/main/TOTOLINK/A3002R/3/overflow.md; https://www.totolink.net/home/menu/detail/menu_listtpl/download/id/258/ids/36.html
CVE: CVE-2025-45865
Published: 2025-05-13
Description: TOTOLINK A3002R v4.0.0-B20[PII_REDACTED] was discovered to contain a buffer overflow via the dnsaddr parameter in the formDhcpv6s interface.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120, CWE-120
References: https://github.com/Jiangxiazhe/IOT_hack/blob/main/TOTOLINK/A3002R/6/overflow.md; https://www.totolink.net/home/menu/detail/menu_listtpl/download/id/258/ids/36.html
CVE: CVE-2025-45863
Published: 2025-05-13
Description: TOTOLINK A3002R v4.0.0-B20[PII_REDACTED] was discovered to contain a buffer overflow via the macstr parameter in the formMapDelDevice interface.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120
References: https://github.com/Jiangxiazhe/IOT_hack/blob/main/TOTOLINK/A3002R/5/overflow.md; https://www.totolink.net/home/menu/detail/menu_listtpl/download/id/258/ids/36.html
CVE: CVE-2024-28036
Published: 2025-05-13
Description: Improper conditions check for some Intel(R) Arc™ GPU may allow an authenticated user to potentially enable denial of service via local access.
CVSS Score: 5.6 (MEDIUM)
CWE: CWE-754
References: https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01252.html
CVE: CVE-2024-28954
Published: 2025-05-13
Description: Incorrect default permissions for some Intel(R) Graphics Driver installers may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-276
References: https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01253.html
CVE: CVE-2024-28956
Published: 2025-05-13
Description: Exposure of Sensitive Information in Shared Microarchitectural Structures during Transient Execution for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.
CVSS Score: 5.6 (MEDIUM)
References: https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01153.html; http://www.openwall.com/lists/oss-security/2025/05/12/5; http://xenbits.xen.org/xsa/advisory-469.html
CVE: CVE-2024-29222
Published: 2025-05-13
Description: Out-of-bounds write for some Intel(R) Graphics Driver software may allow an authenticated user to potentially enable denial of service via local access.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-787
References: https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01253.html
CVE: CVE-2024-31073
Published: 2025-05-13
Description: Uncontrolled search path for some Intel(R) oneAPI Level Zero software may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-427
References: https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01274.html
CVE: CVE-2024-31150
Published: 2025-05-13
Description: Out-of-bounds read for some Intel(R) Graphics Driver software may allow an authenticated user to potentially enable information disclosure via local access.
CVSS Score: 3.8 (LOW)
CWE: CWE-125
References: https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01253.html
CVE: CVE-2024-36292
Published: 2025-05-13
Description: Improper buffer restrictions for some Intel(R) Data Center GPU Flex Series for Windows driver before version 31.0.101.4314 may allow an authenticated user to potentially enable denial of service via local access.
CVSS Score: 7.3 (HIGH)
CWE: CWE-119
References: https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01253.html
CVE: CVE-2024-39758
Published: 2025-05-13
Description: Improper access control for some Intel(R) Arc™ &amp; Iris(R) Xe graphics software before version 31.0.101.4032 may allow an authenticated user to potentially enable denial of service via local access.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-284
References: https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01253.html
CVE: CVE-2024-39833
Published: 2025-05-13
Description: Uncontrolled search path for some Intel(R) QAT software before version 2.3.0 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-427
References: https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01216.html
CVE: CVE-2024-43101
Published: 2025-05-13
Description: Improper access control for some Intel(R) Data Center GPU Flex Series for Windows driver software before version 31.0.101.4255 may allow an authenticated user to potentially enable denial of service via local access.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-284
References: https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01253.html
CVE: CVE-2024-43420
Published: 2025-05-13
Description: Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient execution for some Intel Atom(R) processors may allow an authenticated user to potentially enable information disclosure via local access.
CVSS Score: 5.6 (MEDIUM)
References: https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html; https://lists.debian.org/debian-lts-announce/2025/05/msg00021.html
CVE: CVE-2024-45332
Published: 2025-05-13
Description: Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient execution in the indirect branch predictors for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.
CVSS Score: 5.6 (MEDIUM)
References: https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html; http://www.openwall.com/lists/oss-security/2025/05/13/7; https://comsec.ethz.ch/research/microarch/branch-privilege-injection/
CVE: CVE-2024-45333
Published: 2025-05-13
Description: Improper access control for some Intel(R) Data Center GPU Flex Series for Windows driver before version 31.0.101.4314 may allow an authenticated user to potentially enable denial of service via local access.
CVSS Score: 7.3 (HIGH)
CWE: CWE-284
References: https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01253.html
CVE: CVE-2024-45371
Published: 2025-05-13
Description: Improper access control for some Intel(R) Arc™ &amp; Iris(R) Xe graphics software before version 32.0.101.6077 may allow an authenticated user to potentially enable denial of service via local access.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-284
References: https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01253.html
CVE: CVE-2024-46895
Published: 2025-05-13
Description: Uncontrolled search path for some Intel(R) Arc™ &amp; Iris(R) Xe graphics software before version 32.0.101.6083/32.0.101.5736 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-427
References: https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01253.html
CVE: CVE-2024-47550
Published: 2025-05-13
Description: Incorrect default permissions for some Endurance Gaming Mode software installers may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-276
References: https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01254.html
CVE: CVE-2024-47795
Published: 2025-05-13
Description: Uncontrolled search path for some Intel(R) oneAPI DPC++/C++ Compiler software before version 2025.0.0 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-427
References: https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01243.html
CVE: CVE-2024-47800
Published: 2025-05-13
Description: Uncontrolled search path for some Intel(R) Graphics Driver software may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-427
References: https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01253.html
CVE: CVE-2024-48869
Published: 2025-05-13
Description: Improper restriction of software interfaces to hardware features for some Intel(R) Xeon(R) 6 processor with E-cores when using Intel(R) Trust Domain Extensions (Intel(R) TDX) or Intel(R) Software Guard Extensions (Intel(R) SGX) may allow a privileged user to potentially enable escalation of privilege via local access.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-1256
References: https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01268.html
CVE: CVE-2025-20003
Published: 2025-05-13
Description: Improper link resolution before file access ('Link Following') for some Intel(R) Graphics Driver software installers may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 8.2 (HIGH)
CWE: CWE-59
References: https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01259.html
CVE: CVE-2025-20004
Published: 2025-05-13
Description: Insufficient control flow management in the Alias Checking Trusted Module for some Intel(R) Xeon(R) 6 processor E-Cores firmware may allow a privileged user to potentially enable escalation of privilege via local access.
CVSS Score: 7.2 (HIGH)
CWE: CWE-691
References: https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01273.html
CVE: CVE-2025-20006
Published: 2025-05-13
Description: Use after free for some Intel(R) PROSet/Wireless WiFi Software for Windows before version 23.100 may allow an unauthenticated user to potentially enable denial of service via adjacent access.
CVSS Score: 7.4 (HIGH)
CWE: CWE-416
References: https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01270.html
CVE: CVE-2025-20008
Published: 2025-05-13
Description: Insecure inherited permissions for some Intel(R) Simics(R) Package Manager software before version 1.12.0 may allow a privileged user to potentially enable escalation of privilege via local access.
CVSS Score: 7.7 (HIGH)
CWE: CWE-277
References: https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01297.html
CVE: CVE-2025-20009
Published: 2025-05-13
Description: Improper input validation in the UEFI firmware GenerationSetup module for the Intel(R) Server D50DNP and M50FCP boards may allow a privileged user to potentially enable information disclosure via local access.
CVSS Score: 4.1 (MEDIUM)
CWE: CWE-20
References: https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01269.html
CVE: CVE-2025-20012
Published: 2025-05-13
Description: Incorrect behavior order for some Intel(R) Core™ Ultra Processors may allow an unauthenticated user to potentially enable information disclosure via physical access.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-696
References: https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01322.html; https://lists.debian.org/debian-lts-announce/2025/05/msg00021.html
CVE: CVE-2025-20013
Published: 2025-05-13
Description: Exposure of sensitive information to an unauthorized actor for some Edge Orchestrator software for Intel(R) Tiber™ Edge Platform may allow an authenticated user to potentially enable information disclosure via local access.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01239.html
CVE: CVE-2025-20015
Published: 2025-05-13
Description: Uncontrolled search path element for some Intel(R) Ethernet Connection software before version 29.4 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-427
References: https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01294.html
CVE: CVE-2025-20018
Published: 2025-05-13
Description: Untrusted pointer dereference for some Intel(R) Graphics Drivers may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 8.4 (HIGH)
CWE: CWE-822
References: https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01259.html
CVE: CVE-2025-20022
Published: 2025-05-13
Description: Insufficient control flow management for some Edge Orchestrator software for Intel(R) Tiber™ Edge Platform may allow a privileged user to potentially enable information disclosure via adjacent access.
CVSS Score: 5.7 (MEDIUM)
CWE: CWE-691
References: https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01239.html
CVE: CVE-2025-20026
Published: 2025-05-13
Description: Out-of-bounds read for some Intel(R) PROSet/Wireless WiFi Software for Windows before version 23.100 may allow an unauthenticated user to potentially enable denial of service via adjacent access.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-125
References: https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01270.html
CVE: CVE-2025-20030
Published: 2025-05-13
Description: Exposure of sensitive information to an unauthorized actor for some Edge Orchestrator software for Intel(R) Tiber™ Edge Platform may allow an authenticated user to potentially enable information disclosure via adjacent access.
CVSS Score: 2.6 (LOW)
CWE: CWE-200
References: https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01239.html
CVE: CVE-2025-20031
Published: 2025-05-13
Description: Improper input validation for some Intel(R) Graphics Drivers may allow an authenticated user to potentially enable denial of service via local access.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01259.html
CVE: CVE-2025-20032
Published: 2025-05-13
Description: Improper input validation for some Intel(R) PROSet/Wireless WiFi Software for Windows before version 23.100 may allow a privileged user to potentially enable denial of service via local access.
CVSS Score: 7.9 (HIGH)
CWE: CWE-20
References: https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01270.html
CVE: CVE-2025-20034
Published: 2025-05-13
Description: Improper input validation in the BackupBiosUpdate UEFI firmware SmiVariable driver for the Intel(R) Server D50DNP and M50FCP boards before version R01.02.0003 may allow a privileged user to potentially enable information disclosure via local access.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-20
References: https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01269.html
CVE: CVE-2025-20039
Published: 2025-05-13
Description: Race condition for some Intel(R) PROSet/Wireless WiFi Software for Windows before version 23.100 may allow an unauthenticated user to potentially enable denial of service via adjacent access.
CVSS Score: 6.6 (MEDIUM)
CWE: CWE-362
References: https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01270.html
CVE: CVE-2025-20041
Published: 2025-05-13
Description: Uncontrolled search path for some Intel(R) Graphics software for Intel(R) Arc™ graphics and Intel(R) Iris(R) Xe graphics before version 32.0.101.6325/32.0.101.6252 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-427
References: https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01259.html
CVE: CVE-2025-20043
Published: 2025-05-13
Description: Uncontrolled search path for some Intel(R) RealSense™ SDK software before version 2.56.2 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-427
References: https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01305.html
CVE: CVE-2025-20046
Published: 2025-05-13
Description: Use after free for some Intel(R) PROSet/Wireless WiFi Software for Windows before version 23.100 may allow an unauthenticated user to potentially enable denial of service via adjacent access.
CVSS Score: 8.0 (HIGH)
CWE: CWE-416
References: https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01270.html
CVE: CVE-2025-20047
Published: 2025-05-13
Description: Improper locking in the Intel(R) Integrated Connectivity I/O interface (CNVi) for some Intel(R) Core™ Ultra Processors may allow an unauthenticated user to potentially enable escalation of privilege via physical access.
CVSS Score: 5.7 (MEDIUM)
CWE: CWE-667
References: https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01180.html
CVE: CVE-2025-20052
Published: 2025-05-13
Description: Improper access control for some Intel(R) Graphics software may allow an authenticated user to potentially enable denial of service via local access.
CVSS Score: 7.3 (HIGH)
CWE: CWE-284
References: https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01259.html
CVE: CVE-2025-20054
Published: 2025-05-13
Description: Uncaught exception in the core management mechanism for some Intel(R) Processors may allow an authenticated user to potentially enable denial of service via local access.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-248
References: https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01244.html; https://lists.debian.org/debian-lts-announce/2025/05/msg00021.html
CVE: CVE-2025-20057
Published: 2025-05-13
Description: Uncontrolled resource consumption for some Edge Orchestrator software for Intel(R) Tiber™ Edge Platform may allow an authenticated user to potentially enable denial of service via adjacent access.
CVSS Score: 3.5 (LOW)
CWE: CWE-400
References: https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01239.html
CVE: CVE-2025-20062
Published: 2025-05-13
Description: Use after free for some Intel(R) PROSet/Wireless WiFi Software for Windows before version 23.100 may allow an unauthenticated user to potentially enable denial of service via adjacent access.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-416
References: https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01270.html
CVE: CVE-2025-20071
Published: 2025-05-13
Description: NULL pointer dereference for some Intel(R) Graphics Drivers may allow an authenticated user to potentially enable denial of service via local access.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-476
References: https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01259.html
CVE: CVE-2025-20076
Published: 2025-05-13
Description: Improper access control for some Edge Orchestrator software for Intel(R) Tiber™ Edge Platform may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-284
References: https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01239.html