CVE Vulnerability Catalog

Uncontrolled resource consumption in Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 2: Device Drivers may allow a denial of service. The attack requires local access, low complexity, and no user interaction. The vulnerability impacts system availability (high), but not confidentiality or integrity.

Out-of-bounds read in Intel PROSet/Wireless WiFi drivers for Windows (Ring 0) may lead to denial of service. The attack requires network access and high complexity, with no user interaction. The impact on system availability is high.

Uncaught exception in some Intel(R) TDX modules within Ring 0: Trust Domain may allow a denial of service. The attack requires a privileged user, high complexity, and local access, with no user interaction. The vulnerability impacts availability (high), but not confidentiality or integrity.

Protection mechanism failure in Cluster Management Toolkit for Kubernetes before version v0.8.5 (Ring 3: User Applications) may allow an escalation of privilege. The attack requires a privileged user, low complexity, local access, and passive user interaction. The vulnerability impacts confidentiality, integrity, and availability (high).

Improper conditions check in Intel(R) NPU Driver for all versions within Ring 3: User Applications may allow a denial of service. The attack requires an authenticated user, low complexity, and local access, with no user interaction. The vulnerability impacts integrity (low) and availability (high), but not confidentiality.

Incorrect comparison in Intel(R) TDX Guest software before version 0.3.1 within Ring 3: User Applications may allow an escalation of privilege. The attack requires a privileged user, low complexity, and local access, with no user interaction. The vulnerability impacts confidentiality, integrity, and availability (low).

Incorrect calculation in Intel(R) TDX Guest software before version 0.3.1 within Ring 3: User Applications may allow an escalation of privilege. The attack requires a privileged user, low complexity, and local access, with no user interaction. The vulnerability impacts confidentiality, integrity, and availability (low).

Improper handling of overlap between protected memory ranges in some microcode for some Intel(R) Processors within Ring 0: Hypervisor may allow an escalation of privilege. The attack requires a privileged user, low complexity, and local access, with no user interaction. The vulnerability impacts confidentiality, integrity, and availability (high).

Protection mechanism failure in LLM Scaler software within Ring 3: User Applications may allow an escalation of privilege. The attack requires a privileged user, low complexity, local access, and passive user interaction. The vulnerability impacts confidentiality, integrity, and availability (high).

Improper authentication in Intel(R) PROSet/Wireless WiFi Software within Ring 0: Kernel may allow an information disclosure. The attack requires a privileged user, low complexity, and local access, with no user interaction. The vulnerability impacts confidentiality (high), but not integrity or availability.

Improper conditions check in Intel PROSet/Wireless WiFi drivers may lead to denial of service. The attack requires network access and low complexity, with no user interaction. The impact on system availability is high.

Improper initialization in Intel AMT and Intel Standard Manageability firmware may lead to information disclosure. A privileged attacker with a low complexity attack can access data via local access, without user interaction.

Improper buffer restrictions in Intel NPU Driver for user applications (Ring 3) may allow denial of service. An unprivileged attacker with an authenticated user and a low complexity attack can cause system unavailability via local access, without user interaction.

Protection mechanism failure in Intel Extension for TensorFlow before version 2.15.0.3 (Ring 3) may allow privilege escalation. A privileged attacker with a low complexity attack can escalate privileges via local access, requiring passive user interaction.

Insertion of sensitive information into log file in Intel AMT and Intel Standard Manageability subsystem may allow information disclosure. A privileged attacker with a high complexity attack can access data via network, without user interaction.

Hardware logic contains race conditions in 3rd Gen Intel Xeon Scalable Processors (Ring 3), which may allow denial of service. An unprivileged attacker with an authenticated user and a high complexity attack can cause system unavailability via local access, without user interaction.

Insecure storage of sensitive information in Intel TDX module for some Intel platforms (Ring 0) may allow information disclosure. A privileged attacker with a high complexity attack can access data via local access, without user interaction.

A Cross Site Scripting (XSS) vulnerability in AtHoc IWS Web Portals before version 7.21 HF-734 could allow an attacker to execute actions in the context of the victim's session.

Uncontrolled search paths in Vitis Unified installation path on local Windows machines could allow DLL injection into these install paths, potentially resulting in arbitrary code execution.

Omission of security-relevant information for Intel Software Guard Extensions Data Center Attestation Primitives (Ring 0) may allow denial of service. A privileged attacker with a high complexity attack can alter data via local access, without user interaction.