Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2904▼ 176 respecto a la semana anterior

Críticas / altas1294▼ 55 respecto a la semana anterior

Nueva explotación activa (KEV)5▼ 3 respecto a la semana anterior

Sin puntuar (sin CVSS)487▼ 22 respecto a la semana anterior

10 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2025-35990	Analizada	Alta (8.7)	0.22%	—	Intel Endpoint Management Assistant	12/5/2026	21/7/2026	Improper input validation for some Intel Endpoint Management Assistant (EMA) software before version 1.14.5 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an unauthenticated user combined with a low complexity attack may enable escalation of privilege. This…
CVE-2024-32483	Analizada	Alta (7)	0.17%	—	Intel Endpoint Management Assistant	13/11/2024	17/6/2026	Improper access control for some Intel(R) EMA software before version 1.13.1.0 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVE-2022-45128	Modificada	Media (5.5)	0.16%	—	Intel Endpoint Management Assistant	10/5/2023	17/6/2026	Improper authorization in the Intel(R) EMA software before version 1.9.0.0 may allow an authenticated user to potentially enable denial of service via local access.
CVE-2022-41610	Modificada	Media (5.5)	0.16%	—	Intel Endpoint Management Assistant Configuration Tool Intel Manageability Commander	10/5/2023	17/6/2026	Improper authorization in Intel(R) EMA Configuration Tool before version 1.0.4 and Intel(R) MC before version 2.4 software may allow an authenticated user to potentially enable denial of service via local access.
CVE-2022-38056	Modificada	Media (5.3)	0.15%	—	Intel Endpoint Management Assistant	16/2/2023	17/6/2026	Improper neutralization in the Intel(R) EMA software before version 1.8.1.0 may allow a privileged user to potentially enable escalation of privilege via network access.
CVE-2022-30297	Modificada	Alta (7.8)	0.17%	—	Intel Endpoint Management Assistant	11/11/2022	17/6/2026	Cross-site scripting in the Intel(R) EMA software before version 1.8.0 may allow a privileged user to potentially enable escalation of privilege via local access.
CVE-2022-26341	Modificada	Alta (8.8)	0.47%	—	Intel Active Management Technology Software Development KIT Intel Endpoint Management Assistant Intel Manageability Commander	11/11/2022	17/6/2026	Insufficiently protected credentials in software in Intel(R) AMT SDK before version 16.0.4.1, Intel(R) EMA before version 1.7.1 and Intel(R) MC before version 2.3.2 may allow an authenticated user to potentially enable escalation of privilege via network access.
CVE-2021-0013	Modificada	Alta (7.5)	0.97%	—	Intel Endpoint Management Assistant	17/11/2021	17/6/2026	Improper input validation for Intel(R) EMA before version 1.5.0 may allow an unauthenticated user to potentially enable denial of service via network access.
CVE-2020-12316	Modificada	Media (5.5)	0.28%	—	Intel Endpoint Management Assistant	12/11/2020	17/6/2026	Insufficiently protected credentials in the Intel(R) EMA before version 1.3.3 may allow an authorized user to potentially enable information disclosure via local access.
CVE-2020-12315	Modificada	Crítica (9.8)	1.7%	—	Intel Endpoint Management Assistant	12/11/2020	17/6/2026	Path traversal in the Intel(R) EMA before version 1.3.3 may allow an unauthenticated user to potentially enable escalation of privilege via network access.