CVE-2019-14620

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

Insufficient control flow management for some Intel(R) Wireless Bluetooth(R) products may allow an unprivileged user to potentially enable denial of service via adjacent access.

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected software

No affected versions have been published.

Timeline

Published
Aug 13, 2020
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2019

CVE-2019-146254.4Improper access control in on-card storage for the Intel® FPGA Programmable Acceleration Card N3000, all versions, may allow a privileged usCVE-2019-146266.7Improper access control in PCIe function for the Intel® FPGA Programmable Acceleration Card N3000, all versions, may allow a privileged userCVE-2019-146295.5Improper permissions in Intel(R) DAAL before version 2020 Gold may allow an authenticated user to potentially enable information disclosure CVE-2019-14635.5An information disclosure vulnerability exists in Microsoft Access software when the software fails to properly handle objects in memory, akCVE-2019-146304.6Reliance on untrusted inputs in a security decision in some Intel(R) Thunderbolt(TM) controllers may allow unauthenticated user to potentialCVE-2019-14645.5An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, aka 'Microsoft Excel InCVE-2019-14656.5An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows CVE-2019-146526.1explorer.js in Amazon AWS JavaScript S3 Explorer (aka aws-js-s3-explorer) v2 alpha before 2019-08-02 allows XSS in certain circumstances.CVE-2019-146536.1pandao Editor.md 1.5.0 allows XSS via an attribute of an ABBR or SUP element.CVE-2019-146548.8In Joomla! 3.9.7 and 3.9.8, inadequate filtering allows users authorised to create custom fields to manipulate the filtering options and injCVE-2019-146568.8Yealink phones through 2019-08-04 do not properly check user roles in POST requests. Consequently, the default User account (with a passwordCVE-2019-146578.8Yealink phones through 2019-08-04 have an issue with OpenVPN file upload. They execute tar as root to extract files, but do not validate the
CVE-2019-14620: Medium severity, CVSS 6.5 | Vulnix