Skip to main content
CVE-2023-39230 Nov 14, 19:15 HIGH This Week

Insecure inherited permissions in some Intel Rapid Storage Technology software before version 16.8.5.1014.9 may allow an authenticated user to potentially enable escalation of privilege via local. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Intel Rapid Storage Technology
NVD
CVSS 3.1
7.8
EPSS
0.2%
CVE-2023-38570 Nov 14, 19:15 HIGH This Week

Access of memory location after end of buffer for some Intel Unison software may allow an authenticated user to potentially enable escalation of privilege via local access. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Intel Unison Software
NVD
CVSS 3.1
7.8
EPSS
0.2%
CVE-2023-38411 Nov 14, 19:15 HIGH This Week

Improper access control in the Intel Smart Campus android application before version 9.4 may allow an authenticated user to potentially enable escalation of privilege via local access. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Authentication Bypass Privilege Escalation Google Intel Smart Campus
NVD
CVSS 3.1
7.8
EPSS
0.2%
CVE-2023-34997 Nov 14, 19:15 HIGH This Week

Insecure inherited permissions in the installer for some Intel Server Configuration Utility software before version 16.0.9 may allow an authenticated user to potentially enable escalation of. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Intel Server Configuration Utility
NVD
CVSS 3.1
7.8
EPSS
0.2%
CVE-2023-34430 Nov 14, 19:15 HIGH This Week

Uncontrolled search path in some Intel Battery Life Diagnostic Tool software before version 2.2.1 may allow an authenticated user to potentially enable escalation of privilege via local access. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Intel Battery Life Diagnostic Tool
NVD
CVSS 3.1
7.8
EPSS
0.2%
CVE-2023-34350 Nov 14, 19:15 HIGH This Week

Uncontrolled search path element in some Intel(R) XTU software before version 7.12.0.15 may allow an authenticated user to potentially enable escalation of privilege via local access. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Intel Extreme Tuning Utility
NVD
CVSS 3.1
7.8
EPSS
0.2%
CVE-2023-34314 Nov 14, 19:15 HIGH This Week

Insecure inherited permissions in some Intel(R) Simics Simulator software before version 1.7.2 may allow an authenticated user to potentially enable escalation of privilege via local access. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Intel Simics Simulator
NVD
CVSS 3.1
7.8
EPSS
0.2%
CVE-2023-33878 Nov 14, 19:15 HIGH PATCH This Week

Path transversal in some Intel(R) NUC P14E Laptop Element Audio Install Package software before version 156 for Windows may allow an authenticated user to potentially enable escalation of privilege. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity.

Privilege Escalation Microsoft Intel Audio Install Package
NVD
CVSS 3.1
7.8
EPSS
0.2%
CVE-2023-32661 Nov 14, 19:15 HIGH PATCH This Week

Improper authentication in some Intel(R) NUC Kits NUC7PJYH and NUC7CJYH Realtek* SD Card Reader Driver installation software before version 10.0.19041.29098 may allow an authenticated user to. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity.

Authentication Bypass Privilege Escalation Intel Realtek Sd Card Reader Driver
NVD
CVSS 3.1
7.8
EPSS
0.2%
CVE-2023-32638 Nov 14, 19:15 HIGH This Week

Incorrect default permissions in some Intel Arc RGB Controller software before version 1.06 may allow an authenticated user to potentially enable escalation of privilege via local access. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Intel Arc Rgb Controller
NVD
CVSS 3.1
7.8
EPSS
0.2%
CVE-2023-32204 Nov 14, 19:15 HIGH PATCH This Week

Improper access control in some Intel(R) OFU software before version 14.1.31 may allow an authenticated user to potentially enable escalation of privilege via local access. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity.

Authentication Bypass Privilege Escalation Intel One Boot Flash Update
NVD
CVSS 3.1
7.8
EPSS
0.2%
CVE-2023-29504 Nov 14, 19:15 HIGH This Week

Uncontrolled search path element in some Intel(R) RealSense(TM) Dynamic Calibration software before version 2.13.1.0 may allow an authenticated user to potentially enable escalation of privilege via. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Privilege Escalation Intel Realsense D400 Series Dynamic Calibration Tool
NVD
CVSS 3.1
7.8
EPSS
0.2%
CVE-2023-29161 Nov 14, 19:15 HIGH PATCH This Week

Uncontrolled search path in some Intel(R) OFU software before version 14.1.31 may allow an authenticated user to potentially enable escalation of privilege via local access. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity.

Privilege Escalation Intel One Boot Flash Update
NVD
CVSS 3.1
7.8
EPSS
0.2%
CVE-2023-29157 Nov 14, 19:15 HIGH PATCH This Week

Improper access control in some Intel(R) OFU software before version 14.1.31 may allow an authenticated user to potentially enable escalation of privilege via local access. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity.

Authentication Bypass Privilege Escalation Intel One Boot Flash Update
NVD
CVSS 3.1
7.8
EPSS
0.2%
CVE-2023-28741 Nov 14, 19:15 HIGH This Week

Buffer overflow in some Intel(R) QAT drivers for Windows - HW Version 1.0 before version 1.10 may allow an authenticated user to potentially enable escalation of privilege via local access. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Buffer Overflow Microsoft Intel Quickassist Technology +1
NVD
CVSS 3.1
7.8
EPSS
0.2%
CVE-2023-28740 Nov 14, 19:15 HIGH This Week

Uncontrolled search path element in some Intel(R) QAT drivers for Windows - HW Version 2.0 before version 2.0.4 may allow an authenticated user to potentially enable escalation of privilege via local. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Microsoft Intel Quickassist Technology Quickassist Technology Library
NVD
CVSS 3.1
7.8
EPSS
0.2%
CVE-2023-28737 Nov 14, 19:15 HIGH This Week

Improper initialization in some Intel(R) Aptio* V UEFI Firmware Integrator Tools may allow an authenticated user to potentially enable escalation of privilege via local access. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Intel Aptio V Uefi Firmware Integrator Tools
NVD
CVSS 3.1
7.8
EPSS
0.2%
CVE-2023-28401 Nov 14, 19:15 HIGH This Week

Out-of-bounds write in some Intel(R) Arc(TM) & Iris(R) Xe Graphics - WHQL - Windows drivers before version 31.0.101.4255 may allow authenticated user to potentially enable escalation of privilege via. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Buffer Overflow Memory Corruption Microsoft Intel +2
NVD
CVSS 3.1
7.8
EPSS
0.2%
CVE-2023-28397 Nov 14, 19:15 HIGH This Week

Improper access control in some Intel(R) Aptio* V UEFI Firmware Integrator Tools may allow an authenticated to potentially enable escalation of privileges via local access. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Authentication Bypass Intel Aptio V Uefi Firmware Integrator Tools
NVD
CVSS 3.1
7.8
EPSS
0.2%
CVE-2023-28388 Nov 14, 19:15 HIGH This Week

Uncontrolled search path element in some Intel(R) Chipset Device Software before version 10.1.19444.8378 may allow an authenticated user to potentially enable escalation of privilege via local access. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Intel Chipset Device Software
NVD
CVSS 3.1
7.8
EPSS
0.2%
CVE-2023-28378 Nov 14, 19:15 HIGH This Week

Improper authorization in some Intel(R) QAT drivers for Windows - HW Version 2.0 before version 2.0.4 may allow an authenticated user to potentially enable escalation of privilege via local access. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Authentication Bypass Privilege Escalation Microsoft Intel Quickassist Technology Library +1
NVD
CVSS 3.1
7.8
EPSS
0.2%
CVE-2023-28377 Nov 14, 19:15 HIGH This Week

Improper authentication in some Intel(R) NUC Kit NUC11PH USB firmware installation software before version 1.1 for Windows may allow an authenticated user to potentially enable escalation of. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Authentication Bypass Privilege Escalation Microsoft Intel Usb Firmware
NVD
CVSS 3.1
7.8
EPSS
0.2%
CVE-2023-27519 Nov 14, 19:15 HIGH This Week

Improper input validation in firmware for some Intel(R) Optane(TM) SSD products may allow a privileged user to potentially enable escalation of privilege via local access. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Intel Optane Ssd Dc P4800X Firmware Optane Ssd 900P Firmware Optane Ssd 905P Firmware +2
NVD
CVSS 3.1
7.8
EPSS
0.2%
CVE-2023-27513 Nov 14, 19:15 HIGH PATCH This Week

Uncontrolled search path element in some Intel(R) Server Information Retrieval Utility software before version 16.0.9 may allow an authenticated user to potentially enable escalation of privilege via. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity.

Privilege Escalation Intel Server Information Retrieval Utility
NVD
CVSS 3.1
7.8
EPSS
0.2%
CVE-2023-27305 Nov 14, 19:15 HIGH This Week

Incorrect default permissions in some Intel(R) Arc(TM) Control software before version 1.73.5335.2 may allow an authenticated user to potentially enable escalation of privilege via local access. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Intel Iris Xe Graphics Arc A Graphics
NVD
CVSS 3.1
7.8
EPSS
0.2%
CVE-2023-25075 Nov 14, 19:15 HIGH PATCH This Week

Unquoted search path in the installer for some Intel Server Configuration Utility software before version 16.0.9 may allow an authenticated user to potentially enable escalation of privilege via. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity.

Privilege Escalation Intel Server Configuration Utility
NVD
CVSS 3.1
7.8
EPSS
0.2%
CVE-2023-24592 Nov 14, 19:15 HIGH PATCH This Week

Path traversal in the some Intel(R) oneAPI Toolkits and Component software before version 2023.1 may allow authenticated user to potentially enable escalation of privilege via local access. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity.

Privilege Escalation Path Traversal Intel Inspector Advisor +3
NVD
CVSS 3.1
7.8
EPSS
0.3%
CVE-2023-23583 Nov 14, 19:15 HIGH This Week

Sequence of processor instructions leads to unexpected behavior for some Intel(R) Processors may allow an authenticated user to potentially enable escalation of privilege and/or information. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Denial Of Service Information Disclosure Debian Intel +224
NVD
CVSS 3.1
7.8
EPSS
1.7%
CVE-2023-22292 Nov 14, 19:15 HIGH This Week

Uncaught exception for some Intel Unison software may allow an authenticated user to potentially enable escalation of privilege via local access. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Intel Unison Software
NVD
CVSS 3.1
7.8
EPSS
0.2%
CVE-2023-20565 Nov 14, 19:15 HIGH This Week

Insufficient protections in System Management Mode (SMM) code may allow an attacker to potentially enable escalation of privilege via local access. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Amd Ryzen 9 5980Hx Firmware Ryzen 9 5980Hs Firmware Ryzen 9 5900Hx Firmware +68
NVD
CVSS 3.1
7.8
EPSS
0.2%
CVE-2023-20563 Nov 14, 19:15 HIGH This Week

Insufficient protections in System Management Mode (SMM) code may allow an attacker to potentially enable escalation of privilege via local access. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Amd Ryzen 9 5980Hx Firmware Ryzen 9 5980Hs Firmware Ryzen 9 5900Hx Firmware +68
NVD
CVSS 3.1
7.8
EPSS
0.2%
CVE-2023-41840 Nov 14, 18:15 HIGH This Week

A untrusted search path vulnerability in Fortinet FortiClientWindows 7.0.9 allows an attacker to perform a DLL Hijack attack via a malicious OpenSSL engine library in the search path. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Fortinet OpenSSL Forticlient
NVD
CVSS 3.1
7.8
EPSS
0.3%
CVE-2023-36719 Nov 14, 18:15 HIGH PATCH This Week

Microsoft Speech Application Programming Interface (SAPI) Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity.

Information Disclosure Microsoft Windows 10 1507 Windows 10 1607 Windows 10 1809 +11
NVD
CVSS 3.1
7.8
EPSS
0.6%
CVE-2023-36705 Nov 14, 18:15 HIGH PATCH This Week

Windows Installer Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity.

Information Disclosure Microsoft Windows 10 1507 Windows 10 1607 Windows 10 1809 +11
NVD
CVSS 3.1
7.8
EPSS
0.7%
CVE-2023-36422 Nov 14, 18:15 HIGH PATCH This Week

Microsoft Windows Defender Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity.

Information Disclosure Microsoft Windows Defender
NVD
CVSS 3.1
7.8
EPSS
0.8%
CVE-2023-36408 Nov 14, 18:15 HIGH PATCH This Week

Windows Hyper-V Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity.

Buffer Overflow Heap Overflow Microsoft Windows 10 1607 Windows 10 1809 +9
NVD
CVSS 3.1
7.8
EPSS
0.6%
CVE-2023-36407 Nov 14, 18:15 HIGH PATCH This Week

Windows Hyper-V Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity.

Information Disclosure Microsoft Windows 11 22h2 Windows 11 23h2 Windows Server 2022 +2
NVD
CVSS 3.1
7.8
EPSS
1.7%
CVE-2023-36396 Nov 14, 18:15 HIGH PATCH This Week

Windows Compressed Folder Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

RCE Microsoft Windows 11 22h2 Windows 11 23h2
NVD
CVSS 3.1
7.8
EPSS
1.7%
CVE-2023-36393 Nov 14, 18:15 HIGH PATCH This Week

Windows User Interface Application Core Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

RCE Microsoft Windows 10 1507 Windows 10 1607 Windows 10 1809 +10
NVD
CVSS 3.1
7.8
EPSS
1.0%
CVE-2023-36047 Nov 14, 18:15 HIGH PATCH This Week

Windows Authentication Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity.

Information Disclosure Microsoft Windows 10 1809 Windows 10 21h2 Windows 10 22h2 +5
NVD
CVSS 3.1
7.8
EPSS
1.1%
CVE-2023-36045 Nov 14, 18:15 HIGH PATCH This Week

Microsoft Office Graphics Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

RCE Microsoft 365 Apps Office Office Long Term Servicing Channel
NVD
CVSS 3.1
7.8
EPSS
1.0%
CVE-2023-36037 Nov 14, 18:15 HIGH PATCH This Week

Microsoft Excel Security Feature Bypass Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

Authentication Bypass Microsoft 365 Apps Excel Office +1
NVD
CVSS 3.1
7.8
EPSS
1.2%
CVE-2023-36036 Nov 14, 18:15 HIGH KEV PATCH THREAT This Week

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity.

Buffer Overflow Heap Overflow Microsoft Windows 10 1507 Windows 10 1607 +11
NVD
CVSS 3.1
7.8
EPSS
16.7%
CVE-2023-36033 Nov 14, 18:15 HIGH KEV PATCH THREAT This Week

Windows DWM Core Library Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity.

Information Disclosure Microsoft Windows 10 1809 Windows 10 21h2 Windows 10 22h2 +6
NVD
CVSS 3.1
7.8
EPSS
12.0%
CVE-2023-6111 Nov 14, 14:15 HIGH PATCH This Week

A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. This Use After Free vulnerability could allow attackers to access freed memory to execute arbitrary code or crash the application.

Privilege Escalation Linux Use After Free Memory Corruption Linux Kernel
NVD
CVSS 3.1
7.8
EPSS
0.3%
CVE-2023-45624 Nov 14, 23:15 HIGH This Week

An unauthenticated Denial-of-Service (DoS) vulnerability exists in the soft ap daemon accessed via the PAPI protocol. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure HP Arubaos Instantos Arubanetworks
NVD
CVSS 3.1
7.5
EPSS
0.9%
CVE-2023-45623 Nov 14, 23:15 HIGH This Week

Unauthenticated Denial-of-Service (DoS) vulnerabilities exist in the Wi-Fi Uplink service accessed via the PAPI protocol. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure HP Arubaos Instantos Arubanetworks
NVD
CVSS 3.1
7.5
EPSS
0.9%
CVE-2023-45622 Nov 14, 23:15 HIGH This Week

Unauthenticated Denial-of-Service (DoS) vulnerabilities exist in the BLE daemon service accessed via the PAPI protocol. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Denial Of Service HP Arubaos Instantos Arubanetworks
NVD
CVSS 3.1
7.5
EPSS
0.9%
CVE-2023-45621 Nov 14, 23:15 HIGH This Week

Unauthenticated Denial-of-Service (DoS) vulnerabilities exist in the CLI service accessed via the PAPI protocol. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Denial Of Service HP Arubaos Instantos Arubanetworks
NVD
CVSS 3.1
7.5
EPSS
0.9%
CVE-2023-45620 Nov 14, 23:15 HIGH This Week

Unauthenticated Denial-of-Service (DoS) vulnerabilities exist in the CLI service accessed via the PAPI protocol. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure HP Arubaos Instantos Arubanetworks
NVD
CVSS 3.1
7.5
EPSS
0.9%
Prev Page 3 of 6 Next

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy