779 matches found
CVE-2023-26299
A potential Time-of-Check to Time-of-Use TOCTOU vulnerability has been identified in certain HP PC products using AMI UEFI Firmware system BIOS, which might allow arbitrary code execution. AMI has released updates to mitigate the potential vulnerability...
CVE-2023-28743
Improper input validation for some Intel NUC BIOS firmware before version QN0073 may allow a privileged user to potentially enable escalation of privilege via local access...
CVE-2023-40220
Improper buffer restrictions in some IntelR NUC BIOS firmware may allow a privileged user to potentially enable information disclosure via local access...
CVE-2023-34438
Race condition in some IntelR NUC BIOS firmware may allow a privileged user to potentially enable escalation of privilege via local access...
CVE-2023-34431
Improper input validation in some IntelR Server Board BIOS firmware may allow a privileged user to potentially enable escalation of privilege via local access...
CVE-2023-29500
Exposure of sensitive information to an unauthorized actor in BIOS firmware for some IntelR NUCs may allow a privilege user to potentially enable information disclosure via local access...
CVE-2023-27887
Improper initialization in BIOS firmware for some IntelR NUCs may allow a privileged user to potentially enable information disclosure via local access...
CVE-2023-25756
Out-of-bounds read in the BIOS firmware for some IntelR Processors may allow an authenticated user to potentially enable escalation of privilege via adjacent access...
CVE-2023-34086
Improper input validation in some IntelR NUC BIOS firmware may allow a privileged user to potentially enable escalation of privilege via local access...
CVE-2023-22449
Improper input validation in some IntelR NUC BIOS firmware may allow a privileged user to potentially enable escalation of privilege via local access...
CVE-2023-32282
Race condition in BIOS firmware for some IntelR Processors may allow a privileged user to potentially enable escalation of privilege via local access...
CVE-2023-38587
Improper input validation in some Intel NUC BIOS firmware may allow a privileged user to potentially enable escalation of privilege via local access...
CVE-2023-42766
Improper input validation in some Intel NUC 8 Compute Element BIOS firmware may allow a privileged user to potentially enable escalation of privilege via local access...
CVE-2022-44611
Improper input validation in the BIOS firmware for some IntelR Processors may allow a privileged user to potentially enable escalation of privilege via adjacent access...
CVE-2022-43505
Insufficient control flow management in the BIOS firmware for some IntelR Processors may allow a privileged user to potentially enable denial of service via local access...
CVE-2022-32577
Improper input validation in BIOS Firmware for some IntelR NUC Kits before version PY0081 may allow a privileged user to potentially enable information disclosure or denial of service via local access...
CVE-2022-36349
Insecure default variable initialization in BIOS firmware for some IntelR NUC Boards and IntelR NUC Kits before version MYi30060 may allow an authenticated user to potentially enable denial of service via local access...
CVE-2022-27879
Improper buffer restrictions in the BIOS firmware for some IntelR Processors may allow a privileged user to potentially enable information disclosure via local access...
CVE-2021-3971
A potential vulnerability by a driver used during older manufacturing processes on some consumer Lenovo Notebook devices that was mistakenly included in the BIOS image could allow an attacker with elevated privileges to modify firmware protection region by modifying an NVRAM variable...