Skip to content

Intel · weakness class

File and Path Handling

171 CVEs

Every dot is a CVE in what this vendor ships; the named ones are the most at risk.

Every one of the 171 is a mark on the map. Named now: 1 to 26, most at risk first.

  1. A directory traversal vulnerability in the web application in McAfee (now Intel Security) SaaS Control Console (SCC) Platform 6.14 before patch 1070, and 6.15 before patch 1076 al…CVE-2013-7462Intel · 1.8% likely

    CWE-22

  2. Path traversal in the Intel(R) EMA before version 1.3.3 may allow an unauthenticated user to potentially enable escalation of privilege via network access.CVE-2020-12315Intel · 1.7% likely

    CWE-22

  3. Untrusted search path in Intel Graphics Driver 15.40.x.x, 15.45.x.x, and 21.20.x.x allows unprivileged user to elevate privileges via local access.CVE-2017-5696Intel Corporation · 0.8% likely

    CWE-426

  4. Uncontrolled search path in the WULT software maintained by Intel(R) before version 1.0.0 (commit id 592300b) may allow an unauthenticated user to potentially enable escalation of…CVE-2023-27298Intel · CVSS 8.8 · 0.7% likely

    CWE-427

  5. Uncontrolled search path for the Intel(R) AI Hackathon software before version 2.0.0 may allow an unauthenticated user to potentially enable escalation of privilege via network ac…CVE-2023-28380Intel · CVSS 8.8 · 0.6% likely

    CWE-427

  6. DLL injection vulnerability in the installation executables (Autorun.exe and Setup.exe) for Intel's wireless drivers and related software in Intel Dual Band Wireless-AC, Tri-Band…CVE-2018-3649Intel Corporation · 0.5% likely

    CWE-427

  7. Uncontrolled search path element in the installer for the Intel(R) Rapid Storage Technology software, before versions 17.9.0.34, 18.0.0.640 and 18.1.0.24, may allow an authenticat…CVE-2021-0104Intel · 0.5% likely

    CWE-427

  8. A DLL injection vulnerability in the Intel IoT Developers Kit 4.0 installer may allow an authenticated user to potentially escalate privileges using file modification via local ac…CVE-2018-12163Intel Corporation · 0.5% likely

    CWE-427

  9. Path traversal in the BMC firmware for Intel(R) Server Board M10JNP2SB before version EFI BIOS 7215, BMC 8100.01.08 may allow an unauthenticated user to potentially enable a denia…CVE-2021-0097Intel · 0.5% likely

    CWE-22

  10. Uncontrolled search path element in the installer for Intel(R) Graphics Drivers before versions 26.20.100.7584, 15.45.30.5103, 15.40.44.5107, 15.36.38.5117, and 15.33.49.5100 may…CVE-2020-0515Intel · 0.4% likely

    CWE-427

  11. Path traversal in subsystem for Intel(R) DAL software for Intel(R) CSME versions before 11.8.77, 11.12.77, 11.22.77, 12.0.64, 13.0.32, 14.0.33 and Intel(R) TXE versions before 3.1…CVE-2020-0539Intel · 0.4% likely

    CWE-22

  12. Uncontrolled search path in the installer for the Intel(R) Binary Configuration Tool for Windows, all versions, may allow an authenticated user to potentially enable escalation of…CVE-2020-0598Intel · 0.4% likely

    CWE-426

  13. Insufficient access control vulnerability in Dynamic Application Loader software for Intel(R) CSME before versions 11.8.65, 11.11.65, 11.22.65, 12.0.35 and Intel(R) TXE 3.1.65, 4.…CVE-2019-0086Intel · 0.4% likely

    CWE-59

  14. Unquoted service path in the installer for the Intel(R) SCS Discovery Utility version 12.0.0.129 and earlier may allow an authenticated user to potentially enable escalation of pr…CVE-2019-11093Intel · 0.4% likely

    CWE-428

  15. Unquoted service paths in Intel Quartus Prime Programmer and Tools in versions 15.1 - 18.0 allow a local attacker to potentially execute arbitrary code.CVE-2018-3688Intel Corporation · 0.4% likely

    CWE-428

  16. Unquoted service paths in Intel Quartus II Programmer and Tools in versions 11.0 - 15.0 allow a local attacker to potentially execute arbitrary code.CVE-2018-3687Intel Corporation · 0.4% likely

    CWE-428

  17. Unquoted service paths in Intel Quartus II in versions 11.0 - 15.0 allow a local attacker to potentially execute arbitrary code.CVE-2018-3684Intel Corporation · 0.4% likely

    CWE-428

  18. Unquoted service paths in Intel Quartus Prime in versions 15.1 - 18.0 allow a local attacker to potentially execute arbitrary code.CVE-2018-3683Intel Corporation · 0.4% likely

    CWE-428

  19. Unquoted service paths in Intel Processor Diagnostic Tool (IPDT) before version 4.1.0.27 allows a local attacker to potentially execute arbitrary code.CVE-2018-3668Intel Corporation · 0.4% likely

    CWE-428

  20. The main function in android_main.cpp in thermald allows local users to write to arbitrary files via a symlink attack on /tmp/thermald.pid.CVE-2014-2312Intel · 0.4% likely

    CWE-59

  21. Uncontrolled search path in Intel(R) Graphics Drivers before version 26.20.100.7158 may allow an authenticated user to potentially enable escalation of privilege via local access.CVE-2020-0565Intel · 0.3% likely

    CWE-427

  22. Path traversal in igdkmd64.sys for Intel(R) Graphics Drivers before versions 15.45.30.5103, 15.40.44.5107, 15.36.38.5117 and 15.33.49.5100 may allow an authenticated user to poten…CVE-2020-0520Intel · 0.3% likely

    CWE-22

  23. Uncontrolled search path in the installer for Intel(R) RSTe Software RAID Driver for the Intel(R) Server Board M10JNP2SB before version 4.7.0.1119 may allow an authenticated user…CVE-2020-8687Intel · 0.3% likely

    CWE-427

  24. Unquoted service path in Intel(R) Optane(TM) DC Persistent Memory Module Management Software before version 1.0.0.3461 may allow an authenticated user to potentially enable escala…CVE-2020-0546Intel · 0.3% likely

    CWE-428

  25. Unquoted service path in Control Center-I version 2.1.0.0 and earlier may allow an authenticated user to potentially enable escalation of privilege via local access.CVE-2019-14599Intel · 0.3% likely

    CWE-426

  26. Uncontrolled search path element in the installer for Intel(R) SNMP Subagent Stand-Alone for Windows* may allow an authenticated user to potentially enable escalation of privilege…CVE-2019-14600Intel · 0.3% likely

    CWE-427

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-14 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.