Intel Computing Improvement Program vulnerabilities

22 CVEs affecting Intel Computing Improvement Program, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-24863, published 2025-11-11.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2020-12308, published 2020-11-12. Medium severity, CVSS 6.5. EPSS: 0.9% chance of exploitation in the next 30 days. Improper access control for the Intel(R) Computing Improvement Program before version 2.4.5982 may allow an unprivileged user to potentially enable information disclosure via network access.
CVE-2019-11162, published 2019-08-19. High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days. Insufficient access control in hardware abstraction in SEMA driver for Intel(R) Computing Improvement Program before version 2.4.0.04733 may allow an authenticated user to potentially enable…
CVE-2025-24299, published 2025-11-11. High severity, CVSS 8.8. EPSS: 0.3% chance of exploitation in the next 30 days. Improper input validation for some Intel(R) CIP software before version WIN_DCA_2.4.0.11001 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with…
CVE-2018-12168, published 2018-09-12. High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days. Privilege escalation in file permissions in Intel Computing Improvement Program before version 2.2.0.03942 may allow an authenticated user to potentially execute code as administrator via local…
CVE-2025-24847, published 2025-11-11. Medium severity, CVSS 4.5. EPSS: 0.3% chance of exploitation in the next 30 days. Improper input validation for some Intel(R) CIP software before version WIN_DCA_2.4.0.11001 within Ring 3: User Applications may allow an information disclosure. Unprivileged software adversary with…
CVE-2020-8736, published 2020-08-13. High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days. Improper access control in subsystem for the Intel(R) Computing Improvement Program before version 2.4.5718 may allow an authenticated user to potentially enable escalation of privilege via local…
CVE-2025-24863, published 2025-11-11. Medium severity, CVSS 6.5. EPSS: 0.3% chance of exploitation in the next 30 days. Improper privilege management for some Intel(R) CIP software before version WIN_DCA_2.4.0.11001 within Ring 3: User Applications may allow an information disclosure. Unprivileged software adversary…
CVE-2025-24838, published 2025-11-11. High severity, CVSS 8.8. EPSS: 0.3% chance of exploitation in the next 30 days. Improper privilege management for some Intel(R) CIP software before version WIN_DCA_2.4.0.11001 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary…
CVE-2025-24314, published 2025-11-11. Medium severity, CVSS 4.4. EPSS: 0.3% chance of exploitation in the next 30 days. Improper access control for some Intel(R) CIP software before version WIN_DCA_2.4.0.11001 within Ring 3: User Applications may allow an information disclosure. Unprivileged software adversary with a…
CVE-2025-24834, published 2025-11-11. Medium severity, CVSS 6.5. EPSS: 0.2% chance of exploitation in the next 30 days. Protection mechanism failure for some Intel(R) CIP software before version WIN_DCA_2.4.0.11001 within Ring 3: User Applications may allow an information disclosure. Unprivileged software adversary…

Latest

CVE-2025-24862, published 2025-11-11. Low severity, CVSS 2.0. EPSS: 0.2% chance of exploitation in the next 30 days. Unrestricted upload of file with dangerous type for some Intel(R) CIP software before version WIN_DCA_2.4.0.11001 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged…
CVE-2025-24848, published 2025-11-11. Medium severity, CVSS 6.3. EPSS: 0.1% chance of exploitation in the next 30 days. Protection mechanism failure for some Intel(R) CIP software before version WIN_DCA_2.4.0.11001 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary…
CVE-2025-24307, published 2025-11-11. Low severity, CVSS 2.0. EPSS: 0.2% chance of exploitation in the next 30 days. Improper privilege management for some Intel(R) CIP software before version WIN_DCA_2.4.0.11001 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary…
CVE-2025-20614, published 2025-11-11. Medium severity, CVSS 6.7. EPSS: 0.2% chance of exploitation in the next 30 days. External control of file name or path for some Intel(R) CIP software before version WIN_DCA_2.4.0.11001 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software…