Lucene search

K
osvGoogleOSV:USN-6286-1
HistoryAug 14, 2023 - 1:35 a.m.

intel-microcode vulnerabilities

2023-08-1401:35:24
Google
osv.dev
4
intel
microcode
vulnerabilities
information disclosure
xeon processors
speculative execution
privilege escalation
sgx
tdx
3rd generation
scalable processors
software

7.2 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

51.2%

Daniel Moghimi discovered that some Intel® Processors did not properly clear
microarchitectural state after speculative execution of various instructions. A
local unprivileged user could use this to obtain to sensitive
information. (CVE-2022-40982)

It was discovered that some Intel® Xeon® Processors did not properly
restrict error injection for Intel® SGX or Intel® TDX. A local privileged
user could use this to further escalate their privileges. (CVE-2022-41804)

It was discovered that some 3rd Generation Intel® Xeon® Scalable processors
did not properly restrict access in some situations. A local privileged attacker
could use this to obtain sensitive information. (CVE-2023-23908)