Latest CVE Feed
-
9.6
CRITICALCVE-2021-43523
In uClibc and uClibc-ng before 1.0.39, incorrect handling of special characters in domain names returned by DNS servers via gethostbyname, getaddrinfo, gethostbyaddr, and getnameinfo can lead to output of wrong hostnames (leading to domain hijacking) or i... Read more
- EPSS Score: %2.39
- Published: Nov. 10, 2021
- Modified: May. 05, 2025
-
5.3
MEDIUMCVE-2021-42374
An out-of-bounds heap read in Busybox's unlzma applet leads to information leak and denial of service when crafted LZMA-compressed input is decompressed. This can be triggered by any applet/format that... Read more
Affected Products : fedora cloud_backup hci_management_node solidfire h300s_firmware h500s_firmware h700s_firmware h410s_firmware busybox h300s +9 more products- EPSS Score: %0.07
- Published: Nov. 15, 2021
- Modified: May. 05, 2025
-
8.8
HIGHCVE-2021-38111
The DEF CON 27 badge allows remote attackers to exploit a buffer overflow by sending an oversized packet via the NFMI (Near Field Magnetic Induction) protocol.... Read more
- EPSS Score: %0.32
- Published: Aug. 04, 2021
- Modified: May. 05, 2025
-
7.8
HIGHCVE-2021-37409
Improper access control for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi products may allow a privileged user to potentially enable escalation of privilege via local access.... Read more
Affected Products : wi-fi_6_ax201_firmware wi-fi_6_ax200_firmware wireless-ac_9560_firmware wireless-ac_9462_firmware wireless-ac_9461_firmware wireless-ac_9260_firmware killer_ac_1550_firmware killer_wi-fi_6_ax1650_firmware killer_wi-fi_6e_ax1675_firmware proset_wi-fi_6e_ax210_firmware +16 more products- EPSS Score: %0.07
- Published: Aug. 18, 2022
- Modified: May. 05, 2025
-
5.5
MEDIUMCVE-2021-36980
Open vSwitch (aka openvswitch) 2.11.0 through 2.15.0 has a use-after-free in decode_NXAST_RAW_ENCAP (called from ofpact_decode and ofpacts_decode) during the decoding of a RAW_ENCAP action.... Read more
Affected Products : openvswitch- EPSS Score: %0.07
- Published: Jul. 20, 2021
- Modified: May. 05, 2025
-
7.8
HIGHCVE-2021-33847
Improper buffer restrictions in firmware for some Intel(R) Wireless Bluetooth(R) and Killer(TM) Bluetooth(R) products before version 22.120 may allow an authenticated user to potentially enable escalation of privilege via local access.... Read more
Affected Products : wi-fi_6_ax201_firmware wi-fi_6_ax200_firmware wireless-ac_9560_firmware wireless-ac_9462_firmware wireless-ac_9461_firmware wireless-ac_9260_firmware dual_band_wireless-ac_8265_firmware dual_band_wireless-ac_8260_firmware dual_band_wireless-ac_3168_firmware dual_band_wireless-ac_3165_firmware +26 more products- EPSS Score: %0.06
- Published: Aug. 18, 2022
- Modified: May. 05, 2025
-
5.5
MEDIUMCVE-2021-33166
Incorrect default permissions for the Intel(R) RXT for Chromebook application, all versions, may allow an authenticated user to potentially enable information disclosure via local access.... Read more
- EPSS Score: %0.04
- Published: Feb. 09, 2022
- Modified: May. 05, 2025
-
5.7
MEDIUMCVE-2021-33155
Improper input validation in firmware for some Intel(R) Wireless Bluetooth(R) and Killer(TM) Bluetooth(R) products before version 22.100 may allow an authenticated user to potentially enable denial of service via adjacent access.... Read more
Affected Products : ac_9461_firmware ac_9462_firmware ac_9560_firmware ax210_firmware ax201_firmware ax200_firmware ac_9260_firmware ac_8265_firmware ac_8260_firmware ac_3165_firmware +22 more products- EPSS Score: %0.10
- Published: Feb. 09, 2022
- Modified: May. 05, 2025
-
6.8
MEDIUMCVE-2021-33150
Hardware allows activation of test or debug logic at runtime for some Intel(R) Trace Hub instances which may allow an unauthenticated user to potentially enable escalation of privilege via physical access.... Read more
Affected Products : core_i7-10700k core_i7-7700k atom_c3308 atom_c3336 atom_c3338 atom_c3338r atom_c3436l atom_c3508 atom_c3538 atom_c3558 +409 more products- EPSS Score: %0.33
- Published: Mar. 11, 2022
- Modified: May. 05, 2025
-
5.5
MEDIUMCVE-2021-33149
Observable behavioral discrepancy in some Intel(R) Processors may allow an authorized user to potentially enable information disclosure via local access.... Read more
- EPSS Score: %0.08
- Published: May. 12, 2022
- Modified: May. 05, 2025
-
5.5
MEDIUMCVE-2021-33147
Improper conditions check in the Intel(R) IPP Crypto library before version 2021.2 may allow an authenticated user to potentially enable information disclosure via local access.... Read more
Affected Products : integrated_performance_primitives_cryptography- EPSS Score: %0.06
- Published: Feb. 09, 2022
- Modified: May. 05, 2025
-
5.7
MEDIUMCVE-2021-33139
Improper conditions check in firmware for some Intel(R) Wireless Bluetooth(R) and Killer(TM) Bluetooth(R) products before version 22.100 may allow an authenticated user to potentially enable denial of service via adjacent access.... Read more
Affected Products : ac_9461_firmware ac_9462_firmware ac_9560_firmware ax210_firmware ax201_firmware ax200_firmware ac_9260_firmware ac_8265_firmware ac_8260_firmware ac_3165_firmware +22 more products- EPSS Score: %0.07
- Published: Feb. 09, 2022
- Modified: May. 05, 2025
-
7.8
HIGHCVE-2021-33137
Out-of-bounds write in the Intel(R) Kernelflinger project may allow an authenticated user to potentially enable escalation of privilege via local access.... Read more
Affected Products : kernelflinger- EPSS Score: %0.06
- Published: Feb. 09, 2022
- Modified: May. 05, 2025
-
5.5
MEDIUMCVE-2021-33135
Uncontrolled resource consumption in the Linux kernel drivers for Intel(R) SGX may allow an authenticated user to potentially enable denial of service via local access.... Read more
Affected Products : software_guard_extensions- EPSS Score: %0.05
- Published: May. 12, 2022
- Modified: May. 05, 2025
-
4.6
MEDIUMCVE-2021-33130
Insecure default variable initialization of Intel(R) RealSense(TM) ID Solution F450 before version 2.6.0.74 may allow an unauthenticated user to potentially enable information disclosure via physical access.... Read more
- EPSS Score: %0.08
- Published: May. 12, 2022
- Modified: May. 05, 2025
-
7.8
HIGHCVE-2021-33129
Incorrect default permissions in the software installer for the Intel(R) Advisor before version 2021.4.0 may allow an authenticated user to potentially enable escalation of privilege via local access.... Read more
Affected Products : advisor- EPSS Score: %0.04
- Published: Feb. 09, 2022
- Modified: May. 05, 2025
-
4.4
MEDIUMCVE-2021-33128
Improper access control in the firmware for some Intel(R) E810 Ethernet Controllers before version 1.6.0.6 may allow a privileged user to potentially enable denial of service via local access.... Read more
- EPSS Score: %0.05
- Published: Aug. 18, 2022
- Modified: May. 05, 2025
-
4.4
MEDIUMCVE-2021-33126
Improper access control in the firmware for some Intel(R) 700 and 722 Series Ethernet Controllers and Adapters before versions 8.5 and 1.5.5 may allow a privileged user to potentially enable denial of service via local access.... Read more
Affected Products : ethernet_controller_xxv710_firmware ethernet_controller_xl710_firmware ethernet_controller_v710_firmware ethernet_controller_x710_firmware ethernet_network_adapter_x722da2_firmware ethernet_network_adapter_x722da4fh_firmware ethernet_network_adapter_x722da4g1p5_firmware ethernet_controller_xxv710 ethernet_controller_xl710 ethernet_controller_v710 +4 more products- EPSS Score: %0.04
- Published: Aug. 18, 2022
- Modified: May. 05, 2025
-
7.2
HIGHCVE-2021-33124
Out-of-bounds write in the BIOS authenticated code module for some Intel(R) Processors may allow a privileged user to potentially enable aescalation of privilege via local access.... Read more
- EPSS Score: %0.05
- Published: May. 12, 2022
- Modified: May. 05, 2025
-
7.8
HIGHCVE-2021-33123
Improper access control in the BIOS authenticated code module for some Intel(R) Processors may allow a privileged user to potentially enable aescalation of privilege via local access.... Read more
- EPSS Score: %0.10
- Published: May. 12, 2022
- Modified: May. 05, 2025