Misconfiguration and Insecure Design

Every one of the 36 is a mark on the map. Named now: 1 to 26, most at risk first.

1. Insufficient clickjacking protection in the Web User Interface of Intel AMT firmware versions before 9.1.40.1000, 9.5.60.1952, 10.0.50.1004, 11.0.0.1205, and 11.6.25.1129 potentia…CVE-2017-5697Intel Corporation · 0.9% likely

   CWE-1021

2. Protection mechanism failure in some Intel DCM software before version 5.2 may allow an unauthenticated user to potentially enable escalation of privilege via network access.CVE-2023-31273Intel · CVSS 10 · 0.7% likely

   CWE-693

3. Protection mechanism failure in the Intel(R) DCM software before version 5.1 may allow an authenticated user to potentially enable escalation of privilege via network access.CVE-2022-41979Intel · CVSS 5.4 · 0.6% likely

   CWE-693

4. Protection mechanism failure in the Intel(R) DCM software before version 5.0 may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access.CVE-2022-33942Intel · CVSS 8.8 · 0.6% likely

   CWE-693

5. Protection mechanism failure in Linux kernel mode driver for some Intel(R) Ethernet Network Controllers and Adapters E810 Series before version 28.3 may allow an unauthenticated u…CVE-2024-23499Intel · CVSS 6.5 · 0.5% likely

   CWE-693

6. Insecure default initialization of resource in Intel(R) Boot Guard in Intel(R) CSME versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70, 13.0.40, 13.30.10, 14.0.45 and 14.5.25, I…CVE-2020-8705Intel · 0.5% likely

   CWE-1188

7. Intel Q35, GM45, PM45 Express, Q45, and Q43 Express chipsets in the SINIT Authenticated Code Module (ACM), which allows local users to bypass the Trusted Execution Technology prot…CVE-2009-4419Intel · 0.4% likely

   CWE-16

8. Protection mechanism failure in some Intel(R) oneAPI HPC Toolkit 2023.1 and Intel(R)MPI Library software before version 2021.9 may allow a privileged user to potentially enable es…CVE-2023-27383Intel · CVSS 6.8 · 0.4% likely

   CWE-693

9. Protection mechanism failure for some Intel(R) PROSet/Wireless and Intel(R) Killer(TM) Wi-Fi software before version 22.240 may allow an unauthenticated user to potentially enable…CVE-2023-32644Intel · CVSS 4.3 · 0.4% likely

   CWE-693

10. Installation tool IPDT (Intel Processor Diagnostic Tool) 4.1.0.24 sets permissions of installed files incorrectly, allowing for execution of arbitrary code and potential privilege…CVE-2018-3667Intel Corporation · 0.4% likely

    CWE-1188

11. Protection mechanism failure for some Intel(R) Transfer Learning Tool before version v0.7 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged softw…CVE-2026-39452Intel · CVSS 6.3 · 0.3% likely

    CWE-693

12. Insecure default variable initialization for the Intel BSSA DFT feature may allow a privileged user to potentially enable an escalation of privilege via local access.CVE-2021-0144Intel · 0.3% likely

    CWE-1188

13. Insecure default variable initialization in firmware for some Intel(R) NUCs may allow an authenticated user to potentially enable escalation of privilege via local access.CVE-2020-12336Intel · 0.3% likely

    CWE-1188

14. Protection mechanism failure for some Intel(R) Data Center Attestation Primitives (Intel(R) DCAP) may allow information disclosure. Unprivileged software adversary with an unauthe…CVE-2026-20702Intel · CVSS 8.9 · 0.3% likely

    CWE-693

15. Insecure default variable initialization in some Intel(R) Thunderbolt(TM) DCH drivers for Windows* before version 72 may allow a privileged user to potentially enable information…CVE-2020-12327Intel · 0.3% likely

    CWE-1188

16. Protection mechanism failure for some Intel(R) PROSet/Wireless WiFi software may allow a privileged user to potentially enable escalation of privilege via local access.CVE-2022-46329Intel · CVSS 8.2 · 0.3% likely

    CWE-693

17. Unchecked return value in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable an escalation of privilege via local access.CVE-2021-0114Intel · 0.3% likely

    CWE-1188

18. Insecure default variable initialization of Intel(R) RealSense(TM) ID Solution F450 before version 2.6.0.74 may allow an unauthenticated user to potentially enable information dis…CVE-2021-33130Intel · CVSS 4.6 · 0.3% likely

    CWE-1188

19. Protection mechanism failure for some Intel(R) CIP software before version WIN_DCA_2.4.0.11001 within Ring 3: User Applications may allow an information disclosure. Unprivileged s…CVE-2025-24834Intel · CVSS 6.5 · 0.2% likely

    CWE-693

20. Protection mechanism failure in firmware for some Intel(R) SSD DC Products may allow a privileged user to potentially enable information disclosure via local access.CVE-2021-33081Intel · CVSS 7.9 · 0.2% likely

    CWE-693

21. Protection mechanism failure in some Intel(R) OFU software before version 14.1.31 may allow an authenticated user to potentially enable escalation of privilege via local access.CVE-2023-25945Intel · CVSS 6.7 · 0.2% likely

    CWE-693

22. Protection mechanism failure in some Intel(R) Distribution of OpenVINO toolkit software before version 2023.0.0 may allow an authenticated user to potentially enable information d…CVE-2023-25080Intel · CVSS 5.3 · 0.2% likely

    CWE-693

23. Protection mechanism failure in some Intel(R) RealSense(TM) ID software for Intel(R) RealSense(TM) 450 FA in version 0.25.0 may allow an authenticated user to potentially enable e…CVE-2023-34427Intel · CVSS 5.3 · 0.2% likely

    CWE-693

24. Insecure default variable initialization in BIOS firmware for some Intel(R) NUC Boards and Intel(R) NUC Kits before version MYi30060 may allow an authenticated user to potentially…CVE-2022-36349Intel · CVSS 5.2 · 0.2% likely

    CWE-1188

25. Protection mechanism failure for some Intel(R) Arc(TM) graphics cards A770 and A750 Limited Edition sold between October of 2022 and December of 2022 may allow a privileged user t…CVE-2022-41984Intel · CVSS 4.4 · 0.2% likely

    CWE-693

26. Protection mechanism failure in firmware for some Intel(R) SSD DC Products may allow a privileged user to potentially enable information disclosure via local access.CVE-2021-33079Intel · CVSS 4.1 · 0.2% likely

    CWE-693

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.