CVE-2019-14605

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Improper permissions in the installer for the Intel(R) SCS Platform Discovery Utility, all versions, may allow an authenticated user to potentially enable escalation of privilege via local attack.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-276

Affected software

No affected versions have been published.

Timeline

Published: Dec 16, 2019
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2019

CVE-2019-146075.3Improper conditions check in multiple Intel® Processors may allow an authenticated user to potentially enable partial escalation of privileg CVE-2019-146087.8Improper buffer restrictions in firmware for Intel(R) NUC(R) may allow an authenticated user to potentially enable escalation of privilege v CVE-2019-146096.7Improper input validation in firmware for Intel(R) NUC(R) may allow a privileged user to potentially enable escalation of privilege via loca CVE-2019-14616.5A denial of service vulnerability exists in Microsoft Word software when the software fails to properly handle objects in memory, aka 'Micro CVE-2019-146107.8Improper access control in firmware for Intel(R) NUC(R) may allow an authenticated user to potentially enable escalation of privilege via lo CVE-2019-146116.7Integer overflow in firmware for Intel(R) NUC(R) may allow a privileged user to potentially enable escalation of privilege via local access.CVE-2019-146126.7Out of bounds write in firmware for Intel(R) NUC(R) may allow a privileged user to potentially enable escalation of privilege via local acce CVE-2019-146137.8Improper access control in driver for Intel(R) VTune(TM) Amplifier for Windows* before update 8 may allow an authenticated user to potential CVE-2019-146155.5Insufficient control flow in certain data structures for some Intel(R) Processors with Intel(R) Processor Graphics may allow an unauthentica CVE-2019-14627.8A remote code execution vulnerability exists in Microsoft PowerPoint software when the software fails to properly handle objects in memory, CVE-2019-146206.5Insufficient control flow management for some Intel(R) Wireless Bluetooth(R) products may allow an unprivileged user to potentially enable d CVE-2019-146254.4Improper access control in on-card storage for the Intel® FPGA Programmable Acceleration Card N3000, all versions, may allow a privileged us