Intel Virtual Raid On Cpu — known CVE vulnerabilities

Every CVE whose affected-product data names Intel Virtual Raid On Cpu, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (12)

• CVE-2022-29919 — CVSS 7.8 (high): Use after free in the Intel(R) VROC software before version 7.7.6.1003 may allow an authenticated user to potentially enable escalation of…
• CVE-2022-45112 — CVSS 7.3 (high): Improper access control in some Intel(R) VROC software before version 8.0.0.4035 may allow an authenticated user to potentially enable…
• CVE-2024-29079 — CVSS 6.8 (medium): Insufficient control flow management in some Intel(R) VROC software before version 8.6.0.3001 may allow an authenticated user to…
• CVE-2023-32646 — CVSS 6.7 (medium): Uncontrolled search path element in some Intel(R) VROC software before version 8.0.8.1001 may allow an authenticated user to potentially…
• CVE-2023-34315 — CVSS 6.7 (medium): Incorrect default permissions in some Intel(R) VROC software before version 8.0.8.1001 may allow an authenticated user to potentially…
• CVE-2023-35003 — CVSS 6.7 (medium): Path transversal in some Intel(R) VROC software before version 8.0.8.1001 may allow an authenticated user to potentially enable escalation…
• CVE-2024-23489 — CVSS 6.7 (medium): Uncontrolled search path for some Intel(R) VROC software before version 8.6.0.1191 may allow an authenticated user to potentially enable…
• CVE-2022-30338 — CVSS 6.7 (medium): Incorrect default permissions in the Intel(R) VROC software before version 7.7.6.1003 may allow an authenticated user to potentially enable…
• CVE-2023-31271 — CVSS 6.7 (medium): Improper access control in some Intel(R) VROC software before version 8.0.8.1001 may allow an authenticated user to potentially enable…
• CVE-2022-29508 — CVSS 6.3 (medium): Null pointer dereference in the Intel(R) VROC software before version 7.7.6.1003 may allow an authenticated user to potentially enable…
• CVE-2022-25976 — CVSS 5.5 (medium): Improper input validation in the Intel(R) VROC software before version 7.7.6.1003 may allow an authenticated user to potentially enable…
• CVE-2024-32485 — CVSS 3.9 (low): Improper Input Validation in some Intel(R) VROC software before version 8.6.0.2003 may allow an authenticated user to potentially enable…