CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.11.06)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Improper privilege management in Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 2: Privileged Process may allow privilege escalation. An unprivileged software adversary with an unauthenticated user and high complexity attack may enable escalation. This may occur via local access without user interaction. Confidentiality and integrity impact are low, availability high.
Out-of-bounds write in Intel(R) PROSet/Wireless WiFi Software for Windows may allow a denial of service. An attacker with an unauthenticated user and a low complexity attack may cause a denial of service. The attack requires adjacent access, passive user interaction, and may impact availability.
Improper authentication in the Intel(R) TDX module for some Intel platforms within Ring 0: Trust Domain may allow information disclosure and privilege escalation. A privileged user with a high complexity attack may enable escalation. This may occur via local access without user interaction. Confidentiality and integrity impact are high, availability low.
Null pointer dereference in Intel PROSet/Wireless WiFi drivers for Windows may lead to denial of service. The attack requires network access and low complexity, with no user interaction. The impact on system availability is high.
Untrusted search path in Battery Life Diagnostic Tool software before version 2.9.0 may allow an escalation of privilege. An attacker with an authenticated user and a high complexity attack may enable privilege escalation. The attack requires local access, passive user interaction, and may impact confidentiality, integrity, and availability.
Improper buffer restrictions in Intel PROSet/Wireless WiFi drivers for Windows may lead to denial of service. The attack requires network access and low complexity, with no user interaction. The impact on system availability is high.
Improper access control in Intel PROSet/Wireless WiFi drivers for Windows may allow privilege escalation. The attack requires local access and low complexity, with no user interaction. The impact on confidentiality, integrity, and availability is low, low, and high, respectively.
Null pointer dereference in Intel PROSet/Wireless WiFi drivers for Windows may lead to denial of service. The attack requires network access and low complexity, with no user interaction. The impact on system availability is high.
Improper conditions check in Intel PROSet/Wireless WiFi drivers may lead to denial of service. The attack requires network access and low complexity, with no user interaction. The impact on system availability is high.
Out-of-bounds read in Intel PROSet/Wireless WiFi drivers may allow privilege escalation. The attack requires network access and low complexity, with no user interaction. The impact on confidentiality, integrity, and availability is low, low, and high, respectively.
Out-of-bounds write in Intel PROSet/Wireless WiFi drivers for Windows may lead to denial of service. The attack requires network access and low complexity, with no user interaction. The impact on integrity and availability is low and high, respectively.
Improper access control in Intel PROSet/Wireless WiFi drivers may lead to denial of service. The attack requires local access and low complexity, with no user interaction. The impact on system availability is high.
Improper conditions check in Intel PROSet/Wireless WiFi drivers for Windows may allow a network adversary to cause a denial of service. The attack requires low complexity and no user interaction, and can be performed via adjacent access. The vulnerability impacts system availability (high), with no impact on confidentiality or integrity.
Exposure of sensitive information to an unauthorized actor in Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 2: Device Drivers may allow an escalation of privilege. The attack requires an unauthenticated user, low complexity, and local access, with no user interaction. The vulnerability impacts confidentiality (low), but may lead to local code execution with high impact on confidentiality, integrity, and availability.
A null pointer dereference in Intel PROSet/Wireless WiFi software for Windows in the kernel layer may allow a denial of service. An unprivileged software adversary with an unauthenticated user can exploit the vulnerability with low complexity, no user interaction, via adjacent access. The vulnerability impacts system availability (high), with no impact on confidentiality or integrity.
Improper access control in some Intel processors in the user application layer may allow an escalation of privilege. The attack requires an authenticated user, high complexity, and special internal knowledge, but no user interaction. The vulnerability impacts confidentiality and integrity (high), with no impact on availability.
Improper input validation in firmware for Intel Active Management Technology (AMT) and Intel Standard Manageability may allow a denial of service. A network adversary with an unauthenticated user can exploit the vulnerability with low complexity, no user interaction, via network access. The vulnerability impacts availability (high), with no impact on confidentiality or integrity.
Always-incorrect control flow implementation in Intel Xeon processor firmware may allow privilege escalation. A privileged attacker with a high complexity attack can escalate privileges via local access, without user interaction.
A vulnerability in the Remote Access SSL VPN service for Cisco Secure Firewall ASA and FTD Software could allow an unauthenticated, remote attacker to cause the device to reload unexpectedly, resulting in a denial of service (DoS) condition. The issue is due to insufficient error checking when processing HTTP requests. An attacker could exploit this by sending a crafted HTTP request to the VPN service.
A DLL hijacking vulnerability in AMD Power Design Manager could allow a malicious local attacker to escalate privileges during the uninstallation process, potentially resulting in arbitrary code execution.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS