CVE-2019-14608: Intel CD1IV128MK Firmware

High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days.

Improper buffer restrictions in firmware for Intel(R) NUC(R) may allow an authenticated user to potentially enable escalation of privilege via local access.

Affected products

• Intel CD1IV128MK Firmware: before 0038 (fixed in 0038)
• Intel CD1M3128MK Firmware: before 0058 (fixed in 0058)
• Intel CD1P64GK Firmware: before 0053 (fixed in 0053)
• Intel d34010wyb Firmware: before 0054 (fixed in 0054)
• Intel DE3815TYBE Firmware: before 0024 (fixed in 0024)
• Intel NUC6CAYS Firmware: before 0064 (fixed in 0064)
• Intel NUC6I5SYH Firmware: before 0072 (fixed in 0072)
• Intel NUC6I7KYK Firmware: before 0066 (fixed in 0066)
• Intel NUC7CJYH Firmware: before 0053 (fixed in 0053)
• Intel NUC7I3DNHE Firmware: before 0067 (fixed in 0067)
• Intel NUC7I5DNKE Firmware: before 0067 (fixed in 0067)
• Intel NUC7I7DNKE Firmware: before 0067 (fixed in 0067)
• Intel NUC8I3CYSM Firmware: before 0043 (fixed in 0043)
• Intel NUC8I7BEK Firmware: before 0077 (fixed in 0077)
• Intel NUC8I7HNK Firmware: before 0059 (fixed in 0059)
• Intel Nuc 8 Mainstream Game Kit Firmware: before 0036 (fixed in 0036)
• Intel Nuc 8 Mainstream Game Mini Computer Firmware: before 0036 (fixed in 0036)
• Intel STK2M3W64CC Firmware: before 0062 (fixed in 0062)
• Intel STK2MV64CC Firmware: before 0061 (fixed in 0061)

Published 2019-12-16. Last modified 2026-06-17.