Intel Patches High-Severity Privilege-Escalation Bugs

Minimalist · Jan 9, 2019

Intel on Tuesday patched three high-severity vulnerabilities that could allow the escalation of privileges across an array of products. Overall, the chip giant fixed five bugs – three rated high-severity, and two medium-severity.

The most concerning of these bugs is an escalation-of-privilege glitch in Intel’s PROset/Wireless Wi-Fi software, which is its wireless connection management tool. The vulnerability, CVE-2018-12177, has a “high” CVSS score of 7.8, according to Intel’s update.

“Intel is releasing software updates to mitigate this potential vulnerability,” it said, urging users to update to version 20.90.0.7 or later of the software.
Click to expand...

https://threatpost.com/intel-patches-privilege-escalation-bugs/

mary7 · Jan 10, 2019

the Intel’s PROset/Wireless Wi-Fi software update will be offered by Windows update?

guest · Mar 13, 2019

Intel Windows 10 Graphics Drivers Riddled With Flaws
March 13, 2019
https://threatpost.com/intel-windows-10-graphics-drivers/142778/

Intel has patched 19 vulnerabilities across its popular graphics drivers for Windows 10, including two high-severity flaws.
CVE-2018-12216 and CVE-2018-12214 could both allow a privileged user to execute arbitrary code via local access, according to an Intel advisory.

“Multiple potential security vulnerabilities in Intel Graphics Driver for Windows may allow escalation of privileges, denial-of-service or information disclosure,” Intel said in a Tuesday security advisory. “Intel is releasing Intel Graphics Driver for Windows updates to mitigate these potential vulnerabilities.”

“This isn’t the first time we’ve seen a vulnerability of this magnitude with Intel, and at this point I think many people have already prepared themselves for the possibility that it’s not the last, either,” Bryan Becker, application security researcher at WhiteHat Security, told Threatpost.
Click to expand...

The graphics driver patches are part of a larger set of fixes across seven Intel products, including its Matrix Storage Manager, Active Management Technology and Accelerated Storage Manager.

[...] a flaw in Intel Accelerated Storage Manager in Rapid Storage Technology enterprise (RSTe) that may allow escalation of privilege.
[...] escalation of privilege flaw (CVE-2019-0129) in Intel’s USB 3.0 creator utility [...] denial-of-service and information-disclosure flaw in Intel’s software guard extensions SDK (CVE-2019-0122).
Click to expand...

Log in or Sign up

Intel Patches High-Severity Privilege-Escalation Bugs

Minimalist Registered Member

mary7 Registered Member

guest Guest

Log in or Sign up

Intel Patches High-Severity Privilege-Escalation Bugs

Minimalist Registered Member

mary7 Registered Member

guest Guest

Useful Searches