Skip to content
OpenAdvisories

Archive

10 February 2026

Vulnerabilities first published on this day (UTC), newest first.

282 results · Feed

  • Medium 5.7

    Kanboard Affected by Cross-Site Request Forgery (CSRF) via Content-Type Misconfiguration in Project Role Assignment

    Kanboard is project management software focused on Kanban methodology. Prior to 1.2.50, a Cross-Site Request Forgery (CSRF) vulnerability exists in the ProjectPermissionController within the Kanboard application. The application fails to strictly enforce the …

  • Medium 6.7

    Incorrect default permissions for some Intel(R) Chipset Software before version 10.1.20266.8668 or later. within Ring 3…

  • Medium 6.7

    Incorrect default permissions for some Intel(R) Memory and Storage Tool before version 2.5.2 within Ring 3: User Applic…

  • Medium 6.7

    Incorrect permission assignment for critical resource for some System Firmware Update Utility (SysFwUpdt) for Intel(R) …

  • High 7.9

    Missing protection mechanism for alternate hardware interface in the Intel(R) Quick Assist Technology for some Intel(R)…

  • Medium 4.7

    Improper conditions check in some firmware for some Intel(R) NPU Drivers within Ring 1: Device Drivers may allow a deni…

  • Low 3.3

    Improper conditions check in some firmware for some Intel(R) NPU Drivers within Ring 3: User Applications may allow an …

  • Low 2.8

    Improper conditions check in some firmware for some Intel(R) Graphics Drivers and Intel LTS kernels within Ring 1: Devi…

  • Medium 5.5

    Improper conditions check in some firmware for some Intel(R) NPU Drivers within Ring 1: Device Drivers may allow a deni…

  • Medium 4.1

    Use of uninitialized variable for some TDX Module before version tdx1.5 within Ring 0: Hypervisor may allow an informat…

  • Medium 6.7

    Incorrect default permissions for some Intel(R) Graphics Driver software within Ring 2: Privileged Process may allow an…

  • Medium 6.7

    Uncontrolled search path for some AI Playground before version 2.6.1 beta within Ring 3: User Applications may allow an…

  • Medium 6.7

    Insecure inherited permissions for some Intel(R) Graphics Software before version 25.30.1702.0 within Ring 3: User Appl…

  • High 8.6

    Out-of-bounds write in the firmware for the Intel(R) AMT and Intel(R) Standard Manageability within Ring 3: User Applic…

  • Medium 4.4

    Out-of-bounds read for some TDX before version tdx module 1.5.24 within Ring 0: Hypervisor may allow an information dis…

  • Medium 6.5

    Out-of-bounds read in the firmware for some 100GbE Intel(R) Ethernet Network Adapter E810 before version cvl fw 1.7.6, …

  • Medium 5.3

    Race condition for some TDX Module before version tdx1.5 within Ring 0: Hypervisor may allow a denial of service. Autho…

  • Medium 6.7

    Incorrect default permissions for some Intel(R) Battery Life Diagnostic Tool within Ring 3: User Applications may allow…

  • Low 3.9

    Improper handling of values in the microcode flow for some Intel(R) Processor Family may allow an escalation of privile…

  • High 7.9

    Race condition for some TDX Module within Ring 0: Hypervisor may allow an escalation of privilege. System software adve…

  • Medium 6.5

    Improper authorization in the Intel(R) Quick Assist Technology for some Intel(R) Platforms within Ring 0: Kernel may al…

  • Medium 4.1

    Out-of-bounds read for some TDX Module before version tdx1.5 within Ring 0: Hypervisor may allow an information disclos…

  • Medium 4.1

    Out-of-bounds read in the firmware for some Intel(R) Converged Security and Management Engine (CSME) Firmware (FW) with…

  • Medium 4.1

    Exposure of sensitive information during transient execution for some TDX within Ring 0: Hypervisor may allow an inform…

  • Medium 6.0

    Loop with unreachable exit condition ('infinite loop') for some Intel(R) Platform within Ring 0: Kernel may allow a den…

  • Medium 5.3

    Exposed ioctl with insufficient access control in the firmware for some Intel(R) Ethernet Connection E825-C. before ver…

  • Medium 6.0

    Out-of-bounds write in the firmware for some Intel(R) Ethernet Controller E810 before version cvl fw 1.7.8.x within Rin…

  • High 8.2

    Improper input validation for some Server Firmware Update Utility(SysFwUpdt) before version 16.0.12 within Ring 3: User…

  • Low 3.3

    Improper initialization for some ESXi kernel mode driver for the Intel(R) Ethernet 800-Series before version 2.2.2.0 (e…

  • Medium 6.0

    Uncaught exception in the firmware for some 100GbE Intel(R) Ethernet Controller E810 before version cvl fw 1.7.8.x with…

  • Medium 4.7

    Improper buffer restrictions in the firmware for the TDX Module may allow an escalation of privilege. System software a…

  • Medium 6.7

    Incorrect default permissions for the Intel(R) Optane(TM) PMem management software before versions CR_MGMT_01.00.00.358…

  • High 7.5

    Improper input validation for some Server Firmware Update Utility(SysFwUpdt) before version 16.0.12 within Ring 3: User…

  • Medium 6.7

    Uncontrolled search path in some software installer for some VTune(TM) Profiler software and Intel(R) oneAPI Base Toolk…

  • Medium 6.8

    Null pointer dereference in the firmware for some Intel(R) AMT and Intel(R) Standard Manageability within Ring 0: Kerne…

  • Medium 6.7

    Improper conditions check for the Intel(R) Optane(TM) PMem management software before versions CR_MGMT_02.00.00.4052, C…

  • Medium 6.4
    CVE-2025-62676 Public exploit

    An Improper Link Resolution Before File Access ('Link Following') vulnerability [CWE-59] vulnerability in Fortinet Fort…

  • Low 3.8

    An Improper Verification of Source of a Communication Channel vulnerability [CWE-940] vulnerability in Fortinet FortiOS…

  • Medium 5.2

    An inconsistent interpretation of http requests ('http request smuggling') vulnerability in Fortinet FortiOS 7.6.0, For…

  • Medium 6.7

    A use of externally-controlled format string vulnerability in Fortinet FortiOS 7.6.0 through 7.6.4, FortiOS 7.4.0 throu…