CVE-2019-14608

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Improper buffer restrictions in firmware for Intel(R) NUC(R) may allow an authenticated user to potentially enable escalation of privilege via local access.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-119

Affected software

Vendor	Product	Versions
n/a	Intel(R) NUC(R)	See References

References

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00323.htmlPatch, Vendor Advisory
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00323.htmlPatch, Vendor Advisory

Timeline

Published: Dec 16, 2019
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2019

CVE-2019-146096.7Improper input validation in firmware for Intel(R) NUC(R) may allow a privileged user to potentially enable escalation of privilege via loca CVE-2019-14616.5A denial of service vulnerability exists in Microsoft Word software when the software fails to properly handle objects in memory, aka 'Micro CVE-2019-146107.8Improper access control in firmware for Intel(R) NUC(R) may allow an authenticated user to potentially enable escalation of privilege via lo CVE-2019-146116.7Integer overflow in firmware for Intel(R) NUC(R) may allow a privileged user to potentially enable escalation of privilege via local access.CVE-2019-146126.7Out of bounds write in firmware for Intel(R) NUC(R) may allow a privileged user to potentially enable escalation of privilege via local acce CVE-2019-146137.8Improper access control in driver for Intel(R) VTune(TM) Amplifier for Windows* before update 8 may allow an authenticated user to potential CVE-2019-146155.5Insufficient control flow in certain data structures for some Intel(R) Processors with Intel(R) Processor Graphics may allow an unauthentica CVE-2019-14627.8A remote code execution vulnerability exists in Microsoft PowerPoint software when the software fails to properly handle objects in memory, CVE-2019-146206.5Insufficient control flow management for some Intel(R) Wireless Bluetooth(R) products may allow an unprivileged user to potentially enable d CVE-2019-146254.4Improper access control in on-card storage for the Intel® FPGA Programmable Acceleration Card N3000, all versions, may allow a privileged us CVE-2019-146266.7Improper access control in PCIe function for the Intel® FPGA Programmable Acceleration Card N3000, all versions, may allow a privileged user CVE-2019-146295.5Improper permissions in Intel(R) DAAL before version 2020 Gold may allow an authenticated user to potentially enable information disclosure