Intel vulnerabilities
We track 424 vulnerabilities in Intel products across 60+ products. 424 are rated high or critical, and 4 have been exploited in real attacks. The most recent was published on August 11, 2026.
Latest Intel vulnerabilities
- 7.8 High severity
version: Insufficiently Protected Credentials
Insufficiently protected credentials in the installation binaries for Intel(R) SEAPI in all versions may allow an authenticated user to potentially enable escalation of privilege via local access.
- 7.8 High severity
version: Uncontrolled Search Path Element
Uncontrolled search path in the installation binaries for Intel(R) SEAPI all versions may allow an authenticated user to potentially enable escalation of privilege via local access.
- 7.8 High severity
version: Incorrect Default Permissions
Incorrect default permissions in the installation binaries for Intel(R) SEAPI all versions may allow an authenticated user to potentially enable escalation of privilege via local access.
- 7.8 High severity
version: Uncontrolled Search Path Element
Uncontrolled search path element in the Intel(R) Enpirion(R) Digital Power Configurator GUI software, all versions may allow an authenticated user to potentially enable escalation of privilege via local access.
- 9.8 Critical severity
Intel(R): Incorrect Default Permissions
Authentication bypass for the Open AMT Cloud Toolkit software maintained by Intel(R) before versions 2.0.2 and 2.2.2 may allow an unauthenticated user to potentially enable escalation of privilege via network access.
- 7.8 High severity
version: Uncontrolled Search Path Element
Uncontrolled search path elements in the Intel(R) Datacenter Group Event Android application, all versions, may allow an authenticated user to potentially enable escalation of privilege via local access.
- 9.8 Critical severity
Intel(R) Edge Insights for Industrial software: Improper Authentication
Improper authentication in the Intel(R) Edge Insights for Industrial software before version 2.6.1 may allow an unauthenticated user to potentially enable escalation of privilege via network access.
- 7.8 High severity
Intel(R) VTune(TM) Profiler software: Uncontrolled Search Path Element
Uncontrolled search path elements in the Intel(R) VTune(TM) Profiler software before version 2022.2.0 may allow an authenticated user to potentially enable escalation of privilege via local access.
- 7.5 High severity
Improper input validation for some Intel(R) PROSet/Wireless WiFi products may allow an…
Improper input validation for some Intel(R) PROSet/Wireless WiFi products may allow an unauthenticated user to potentially enable denial of service via network access.
- 7.8 High severity
Improper input validation for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi products…
Improper input validation for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi products may allow a privileged user to potentially enable escalation of privilege via local access.
- 7.5 High severity
Intel(R) PROSet/Wireless WiFi products: Improper Restriction of Operations within the Bounds of a Memory Buffer
Improper buffer restrictions for some Intel(R) PROSet/Wireless WiFi products may allow an unauthenticated user to potentially enable denial of service via network access.
- 8.8 High severity
Intel(R) PROSet/Wireless WiFi products: Inadequate Encryption Strength
Inadequate encryption strength for some Intel(R) PROSet/Wireless WiFi products may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access.
- 8.1 High severity
Connman: Use After Free
In ConnMan through 1.41, a man-in-the-middle attack against a WISPR HTTP query could be used to trigger a use-after-free in WISPR handling, leading to crashes or code execution.
- 9.8 Critical severity
Connman: Out-of-bounds Write
In ConnMan through 1.41, remote attackers able to send HTTP requests to the gweb component are able to exploit a heap-based buffer overflow in received_data to execute code.
- 7.3 High severity
Intel(R) XTU software: Uncontrolled Search Path Element
Uncontrolled search path in the Intel(R) XTU software before version 7.3.0.33 may allow an authenticated user to potentially enable escalation of privilege via local access.
- 7.8 High severity
Intel(R) Quartus(R) Prime Pro Edition: Improper Restriction of XML External Entity Reference
Improper restriction of XML external entity for Intel(R) Quartus(R) Prime Pro Edition before version 21.3 may allow an authenticated user to potentially enable escalation of privilege via local access.
- 7.5 High severity
Intel(R) Quartus(R) Prime Pro Edition: Improper Restriction of XML External Entity Reference
Improper restriction of XML external entity reference in DSP Builder Pro for Intel(R) Quartus(R) Prime Pro Edition before version 21.3 may allow an unauthenticated user to potentially enable information disclosure via network access.
- 7.8 High severity
Intel(R) Quartus(R) Prime Pro Edition: Incorrect Default Permissions
Improper permissions for Intel(R) Quartus(R) Prime Pro Edition before version 21.3 may allow an authenticated user to potentially enable escalation of privilege via local access.
- 7.8 High severity
Intel(R) Quartus(R) Prime Standard Edition: Improper Preservation of Permissions
Improper permissions in the SafeNet Sentinel driver for Intel(R) Quartus(R) Prime Standard Edition before version 21.1 may allow an authenticated user to potentially enable escalation of privilege via local access.
- 9.1 Critical severity
Connman: Out-of-bounds Read
An issue was discovered in the DNS proxy in Connman through 1.40. The TCP server reply implementation lacks a check for the presence of sufficient Header Data, leading to an out-of-bounds read.
- 9.0 Critical severity
Apache Log4j2 Deserialization of Untrusted Data Exploited
It was found that the fix to address CVE-2021-44228 in Apache Log4j 2.15.0 was incomplete in certain non-default configurations. This could allows attackers with control over Thread Context Map (MDC) input data when the logging configuration uses a non-default
- 10.0 Critical severity
Apache Log4j2 Remote Code Execution Exploited
Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuration, log messages, and parameters do not protect against attacker controlled LDAP and other JNDI related endpoints. An attacker who c
- 7.8 High severity
Intel Ethernet Diagnostics Driver for Windows Denial-of-Service Exploited
(1) IQVW32.sys before 1.3.1.0 and (2) IQVW64.sys before 1.3.1.0 in the Intel Ethernet diagnostics driver for Windows allows local users to cause a denial of service or possibly execute arbitrary code with kernel privileges via a crafted (a) 0x80862013, (b) 0x8
- 9.8 Critical severity
Intel Active Management Technology (AMT), Small Business Technology (SBT), and Standard Manageability Privilege Escalation Exploited
An unprivileged network attacker could gain system privileges to provisioned Intel manageability SKUs: Intel Active Management Technology (AMT) and Intel Standard Manageability (ISM). An unprivileged local attacker could provision manageability features gainin