CVE-2020-12321High· 8.8▾ TwilightImproper buffer restriction in some Intel(R) Wireless Bluetooth(R) products before version 21.110 may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access.
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 48.4 · likelihood 0.2 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake.
Exploit-prediction probability, daily snapshots since Oct 8.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
1.0%
Improper buffer restriction in some Intel(R) Wireless Bluetooth(R) products before version 21.110 may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access.
dual_band_wireless-ac_3168_firmware < 21.110dual_band_wireless-ac_8260_firmware < 21.110dual_band_wireless-ac_8265_firmware < 21.110wi-fi_6_ax200_firmware < 21.110wi-fi_6_ax201_firmware < 21.110wireless-ac_9260_firmware < 21.110wireless-ac_9461_firmware < 21.110wireless-ac_9462_firmware < 21.110wireless-ac_9560_firmware < 21.110wireless_7265_(rev_d)_firmware < 21.110dual_band_wireless-ac_3165_firmware < 21.110Upgrade past the affected range:
dual_band_wireless-ac_3168_firmware 21.110dual_band_wireless-ac_8260_firmware 21.110dual_band_wireless-ac_8265_firmware 21.110wi-fi_6_ax200_firmware 21.110wi-fi_6_ax201_firmware 21.110wireless-ac_9260_firmware 21.110wireless-ac_9461_firmware 21.110wireless-ac_9462_firmware 21.110wireless-ac_9560_firmware 21.110wireless_7265_(rev_d)_firmware 21.110dual_band_wireless-ac_3165_firmware 21.110Connected by shared product, vendor, weakness, or advisory.
CVE-2020-12322Medium· 6.5Improper input validation in some Intel(R) Wireless Bluetooth(R) products before version 21.110 may allow an unauthenticated user to potentially enable denial of service via adjacent access.
CVE-2020-24512Low· 3.3Observable timing discrepancy in some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.
CVE-2023-7356High· 8.8Bluetooth: ISO: Copy BASE if service data matches EIR_BAA_SERVICE_UUID
CVE-2019-11360Medium· 4.2A buffer overflow in iptables-restore in netfilter iptables 1.8.2 allows an attacker to (at least) crash the program or potentially gain code execution via a specially crafted iptables-save file
CVE-2018-16301High· 7.8The command-line argument parser in tcpdump before 4.99.0 has a buffer overflow in tcpdump.c:read_infile()
CVE-2026-32791High· 7.0Untrusted search path for some Intel(R) Performance Counter Monitor (Intel(R) PCM) before version tag 202604 within Ring 3: User Applications may allow an escalation of privilege