Skip to content

Intel · weakness class

Input Validation and Logic

331 CVEs · 1 exploited

Every dot is a CVE in what this vendor ships; the named ones are the most at risk.

exploited in the wild
1

Every one of the 331 is a mark on the map. Named now: 1 to 26, most at risk first.

  1. (1) IQVW32.sys before 1.3.1.0 and (2) IQVW64.sys before 1.3.1.0 in the Intel Ethernet diagnostics driver for Windows allows local users to cause a denial of service or possibly ex…CVE-2015-2291Intel · CVSS 7.8 · 16% likely

    CWE-20Scattered Spider

  2. Special element injection vulnerability in Intel Security VirusScan Enterprise Linux (VSEL) 2.0.3 (and earlier) allows authenticated remote attackers to read files on the webserve…CVE-2016-8017Intel · 6.9% likely

    CWE-20

  3. A Denial of Service in Intel Ethernet Controller's X710/XL710 with Non-Volatile Memory Images before version 5.05 allows a remote attacker to stop the controller from processing n…CVE-2016-8106Intel · 5.1% likely

    CWE-20

  4. The GetStringAMSHandler function in prgxhndl.dll in hndlrsvc.exe in the Intel Alert Handler service (aka Symantec Intel Handler service) in Intel Alert Management System (AMS), as…CVE-2010-3268Intel · 3.3% likely

    CWE-20

  5. Insufficient control flow management in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.CVE-2021-0157Intel · CVSS 6.7 · 3.1% likely

    CWE-691

  6. Improper input validation in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.CVE-2021-0158Intel · CVSS 6.7 · 3.0% likely

    CWE-20

  7. Unvalidated parameter vulnerability in the remote log viewing capability in Intel Security McAfee Agent 5.0.x versions prior to 5.0.4.449 allows remote attackers to pass unexpecte…CVE-2017-3896Intel · 2.5% likely

    CWE-20

  8. Improper input validation in subsystem for Intel(R) AMT versions before 11.8.77, 11.12.77, 11.22.77 and 12.0.64 may allow an unauthenticated user to potentially enable denial of s…CVE-2020-0538Intel · 2.3% likely

    CWE-20

  9. Improper input validation in DHCPv6 subsystem in Intel(R) AMT and Intel(R) ISM versions before 11.8.77, 11.12.77, 11.22.77 and 12.0.64 may allow an unauthenticated user to potenti…CVE-2020-0596Intel · 2.3% likely

    CWE-20

  10. Improper input validation in the DAL subsystem for Intel(R) CSME versions before 12.0.64, 13.0.32, 14.0.33 and 14.5.12 may allow an unauthenticated user to potentially enable deni…CVE-2020-0534Intel · 1.9% likely

    CWE-20

  11. Improper input validation in the DAL subsystem for Intel(R) CSME versions before 11.8.77, 11.12.77, 11.22.77, 12.0.64, 13.0.32,14.0.33 and Intel(R) TXE versions before 3.1.75 and…CVE-2020-0536Intel · 1.7% likely

    CWE-20

  12. Intel Crosswalk before 19.49.514.5, 20.x before 20.50.533.11, 21.x before 21.51.546.0, and 22.x before 22.51.549.0 interprets a user's acceptance of one invalid X.509 certificate…CVE-2016-5672Intel · 1.7% likely

    CWE-20

  13. Improper input validation in Intel(R) AMT versions before 11.8.76, 11.12.77, 11.22.77 and 12.0.64 may allow an unauthenticated user to potentially enable information disclosure vi…CVE-2020-0535Intel · 1.6% likely

    CWE-20

  14. Bounds check vulnerability in User Mode Driver in Intel Graphics Driver 15.40.x.4 and 21.20.x.x allows unprivileged user to cause a denial of service via local access.CVE-2018-3611Intel Corporation · 1.6% likely

    CWE-20

  15. Improper input validation in subsystem for Intel(R) AMT versions before 11.8.77, 11.12.77, 11.22.77 and 12.0.64 may allow a privileged user to potentially enable denial of service…CVE-2020-0537Intel · 1.6% likely

    CWE-20

  16. Insufficient input validation in the subsystem for Intel(R) AMT before version 12.0.45 may allow an unauthenticated user to potentially enable escalation of privilege via network…CVE-2019-11107Intel · 1.6% likely

    CWE-20

  17. Improper input validation in the Intel(R) RAID Web Console 3 for Windows* may allow an unauthenticated user to potentially enable denial of service via network access.CVE-2020-8688Intel · 1.5% likely

    CWE-20

  18. Insufficient input validation in the subsystem for Intel(R) AMT before versions 11.8.70, 11.11.70, 11.22.70 and 12.0.45 may allow an unauthenticated user to potentially enable inf…CVE-2019-0166Intel · 1.4% likely

    CWE-20

  19. Improper input validation in Intel(R) AMT versions before 11.8.77, 11.12.77, 11.22.77 and 12.0.64 may allow an authenticated user to potentially enable information disclosure via…CVE-2020-0531Intel · 1.4% likely

    CWE-20

  20. Improper input validation in the Intel(R) Data Center Manager Console before version 3.6.2 may allow an authenticated user to potentially enable escalation of privilege via networ…CVE-2020-12347Intel · 1.3% likely

    CWE-20

  21. Insufficient input validation vulnerability in subsystem for Intel(R) AMT before version 12.0.35 may allow a privileged user to potentially enable denial of service via network ac…CVE-2019-0097Intel · 1.2% likely

    CWE-20

  22. Insufficient input validation in Intel(R) Active Management Technology (Intel(R) AMT) before version 11.8.60, 11.11.60, 11.22.60 or 12.0.20 may allow an unauthenticated user to po…CVE-2018-12187Intel Corporation · 1.1% likely

    CWE-20

  23. Unhandled exception in Intel(R) Baseboard Management Controller firmware may allow an unauthenticated user to potentially enable denial of service via network access.CVE-2019-11177Intel · 1.1% likely

    CWE-755

  24. Insufficient input validation in Intel(R) Baseboard Management Controller firmware may allow an unauthenticated user to potentially enable denial of service via network access.CVE-2019-11180Intel · 1.1% likely

    CWE-20

  25. Insufficient input validation in Intel(R) Baseboard Management Controller firmware may allow an unauthenticated user to potentially enable denial of service via network access.CVE-2019-11175Intel · 1.1% likely

    CWE-20

  26. Improper input validation for Intel(R) EMA before version 1.5.0 may allow an unauthenticated user to potentially enable denial of service via network access.CVE-2021-0013Intel · 1.0% likely

    CWE-20

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-15 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.