Intel Extreme Tuning Utility vulnerabilities

11 CVEs affecting Intel Extreme Tuning Utility, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-21835, published 2024-05-16.

More from Intel.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2020-24480, published 2021-02-17. Medium severity, CVSS 4.4. EPSS: 0.5% chance of exploitation in the next 30 days. Out-of-bounds write in the Intel(R) XTU before version 6.5.3.25 may allow a privileged user to potentially enable denial of service via local access.
• CVE-2018-12150, published 2018-09-12. Medium severity, CVSS 6.7. EPSS: 0.4% chance of exploitation in the next 30 days. Escalation of privilege in Installer for Intel Extreme Tuning Utility before 6.4.1.21 may allow an authenticated user to potentially execute code or disclose information as administrator via local…
• CVE-2020-12350, published 2020-11-12. High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days. Improper access control in the Intel(R) XTU before version 6.5.1.360 may allow an authenticated user to potentially enable escalation of privilege via local access.
• CVE-2018-12151, published 2018-09-12. Medium severity, CVSS 5.5. EPSS: 0.3% chance of exploitation in the next 30 days. Buffer overflow in installer for Intel Extreme Tuning Utility before 6.4.1.21 may allow an authenticated user to potentially cause a buffer overflow potentially leading to a denial of service via…
• CVE-2018-12149, published 2018-09-12. Medium severity, CVSS 5.5. EPSS: 0.3% chance of exploitation in the next 30 days. Buffer overflow in input handling in Intel Extreme Tuning Utility before 6.4.1.21 may allow an authenticated user to potentially deny service to the application via local access.
• CVE-2022-22139, published 2022-05-12. High severity, CVSS 7.3. EPSS: 0.2% chance of exploitation in the next 30 days. Uncontrolled search path in the Intel(R) XTU software before version 7.3.0.33 may allow an authenticated user to potentially enable escalation of privilege via local access.
• CVE-2023-34350, published 2023-11-14. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. Uncontrolled search path element in some Intel(R) XTU software before version 7.12.0.15 may allow an authenticated user to potentially enable escalation of privilege via local access.
• CVE-2023-28407, published 2024-02-14. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. Uncontrolled search path in some Intel(R) XTU software before version 7.12.0.29 may allow an authenticated user to potentially enable escalation of privilege via local access.
• CVE-2023-32647, published 2024-02-14. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. Improper access control in some Intel(R) XTU software before version 7.12.0.29 may allow an authenticated user to potentially enable escalation of privilege via local access.
• CVE-2023-38561, published 2024-02-14. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. Improper access control in some Intel(R) XTU software before version 7.12.0.29 may allow an authenticated user to potentially enable escalation of privilege via local access.

Latest

• CVE-2024-21835, published 2024-05-16. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. Insecure inherited permissions in some Intel(R) XTU software before version 7.14.0.15 may allow an authenticated user to potentially enable escalation of privilege via local access.