CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
CISA KEV catalog updated: (v2026.08.24)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Protection mechanism failure in Intel(R) LLM Library for PyTorch may allow privilege escalation. An attacker with a privileged user and a low complexity attack can exploit this locally, requiring passive user interaction. The impact on confidentiality, integrity, and availability is high.
A stored Cross-Site Scripting (XSS) vulnerability in the software that could be exploited by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may execute in a victim's browser when they browse to the page containing the vulnerable field. Scope is changed.
Improper input validation in Intel(R) Neural Compressor software before version v3.7 may allow an escalation of privilege. An unprivileged attacker with an authenticated user and a low complexity attack may enable privilege escalation. The attack requires local access, no user interaction, and may impact confidentiality, integrity, and availability.
A Time-of-check time-of-use race condition in the Intel(R) NPU Driver for Windows may allow a denial of service. An attacker with an authenticated user and a high complexity attack may cause a denial of service. The attack requires local access, no user interaction, and may impact integrity and availability.
Protection mechanism failure in Intel(R) Neural Compressor software before version v3.6 may allow an escalation of privilege. An attacker with a privileged user and a low complexity attack may enable privilege escalation. The attack requires local access, passive user interaction, and may impact confidentiality, integrity, and availability.
Protection mechanism failure in Intel(R) AI Containers before version v0.4.0 may allow an escalation of privilege. An attacker with a privileged user and a low complexity attack may enable privilege escalation. The attack requires local access, passive user interaction, and may impact confidentiality, integrity, and availability.
Improper authentication in Intel(R) PROSet/Wireless WiFi Software for Windows may allow an escalation of privilege. An unprivileged attacker with an unauthenticated user and a low complexity attack may enable local code execution. The attack requires local access, no user interaction, and may impact confidentiality, integrity, and availability.
Out-of-bounds write in Intel(R) PROSet/Wireless WiFi Software for Windows may allow a denial of service. An attacker with an unauthenticated user and a low complexity attack may cause a denial of service. The attack requires adjacent access, passive user interaction, and may impact availability.
Untrusted search path in Battery Life Diagnostic Tool software before version 2.9.0 may allow an escalation of privilege. An attacker with an authenticated user and a high complexity attack may enable privilege escalation. The attack requires local access, passive user interaction, and may impact confidentiality, integrity, and availability.
Out-of-bounds read in the Intel(R) NPU Driver may allow a denial of service. An attacker with an authenticated user and a low complexity attack may cause a denial of service. The attack requires local access, no user interaction, and may impact integrity and availability.
Improper conditions check in the firmware for the Intel(R) NPU Driver may allow a denial of service. An attacker with an authenticated user and a low complexity attack may cause a denial of service. The attack requires local access, no user interaction, and may impact integrity and availability.
Uncontrolled resource consumption in Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 2: Device Drivers may allow a denial of service. The attack requires local access, low complexity, and no user interaction. The vulnerability impacts system availability (high), but not confidentiality or integrity.
Uncaught exception in some Intel(R) TDX modules within Ring 0: Trust Domain may allow a denial of service. The attack requires a privileged user, high complexity, and local access, with no user interaction. The vulnerability impacts availability (high), but not confidentiality or integrity.
Protection mechanism failure in Cluster Management Toolkit for Kubernetes before version v0.8.5 (Ring 3: User Applications) may allow an escalation of privilege. The attack requires a privileged user, low complexity, local access, and passive user interaction. The vulnerability impacts confidentiality, integrity, and availability (high).
Improper conditions check in Intel(R) NPU Driver for all versions within Ring 3: User Applications may allow a denial of service. The attack requires an authenticated user, low complexity, and local access, with no user interaction. The vulnerability impacts integrity (low) and availability (high), but not confidentiality.
Incorrect comparison in Intel(R) TDX Guest software before version 0.3.1 within Ring 3: User Applications may allow an escalation of privilege. The attack requires a privileged user, low complexity, and local access, with no user interaction. The vulnerability impacts confidentiality, integrity, and availability (low).
Incorrect calculation in Intel(R) TDX Guest software before version 0.3.1 within Ring 3: User Applications may allow an escalation of privilege. The attack requires a privileged user, low complexity, and local access, with no user interaction. The vulnerability impacts confidentiality, integrity, and availability (low).
Improper handling of overlap between protected memory ranges in some microcode for some Intel(R) Processors within Ring 0: Hypervisor may allow an escalation of privilege. The attack requires a privileged user, low complexity, and local access, with no user interaction. The vulnerability impacts confidentiality, integrity, and availability (high).
Protection mechanism failure in LLM Scaler software within Ring 3: User Applications may allow an escalation of privilege. The attack requires a privileged user, low complexity, local access, and passive user interaction. The vulnerability impacts confidentiality, integrity, and availability (high).
Improper authentication in Intel(R) PROSet/Wireless WiFi Software within Ring 0: Kernel may allow an information disclosure. The attack requires a privileged user, low complexity, and local access, with no user interaction. The vulnerability impacts confidentiality (high), but not integrity or availability.