Input validation

Improper input validation in the BIOS firmware for some IntelR Processors may allow a privileged user to potentially enable escalation of privilege via local access...

Design/Logic Flaw

Insufficient control flow management in the BIOS firmware for some IntelR Processors may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2021-0158

Improper input validation in the BIOS firmware for some IntelR Processors may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2021-0157

CVE-2021-0157 is described in Intel’s BIOS Reference Code Advisory (INTEL-SA-00562). It denotes insufficient control flow management in BIOS firmware for certain Intel processors that could enable privilege escalation via local access. The advisory lists mitigations through firmware updates provi...

CVE-2021-0157

Insufficient control flow management in the BIOS firmware for some IntelR Processors may allow a privileged user to potentially enable escalation of privilege via local access...

ASUS P453UJ Buffer Overflow Vulnerability

ASUS P453UJ is a BIOS firmware from Asus ASUS of Taiwan, China. The ASUS P453UJ suffers from a buffer overflow vulnerability that originates from a local attacker, with the permission of a regular user, who can modify the BIOS by replacing or padding the contents of the specified Memory DataBuffe...

CVE-2021-0158

A vulnerability was found in the BIOS firmware for some IntelR Processors caused by improper input validation. This flaw allows a user with local access to cause the device to elevate privileges. The highest threat from this vulnerability is to confidentiality, integrity, as well as system...

CVE-2021-0157

A vulnerability was reported in the BIOS firmware for some IntelR Processors caused by insufficient control flow management. This flaw allows a user with local access to cause the device to elevate privileges. The highest threat from this vulnerability is to confidentiality, integrity, as well as...

ASUS P453UJ 缓冲区错误漏洞

ASUS P453UJ is a BIOS firmware from Asus ASUS of Taiwan, China. The ASUS P453UJ suffers from a buffer overflow vulnerability that originates from a local attacker, with the permission of a regular user, who can modify the BIOS by replacing or padding the contents of the specified Memory DataBuffe...

Intel Processors 安全漏洞

Intel Processors are American Intel Corporation's offerings for interpreting computer instructions and processing data in computer software. A security vulnerability exists in Intel Processors that stems from inadequate control flow management in the BIOS firmware...

Intel Processors BIOS firmware 输入验证错误漏洞

Intel Processors are American Intel Corporation's offerings for interpreting computer instructions and processing data in computer software. An input validation error vulnerability exists in the Intel Processors BIOS firmware, which can be exploited by an attacker with local access to elevate the...

BIOS Reference Code Advisory

Summary: Potential security vulnerabilities in the BIOS reference code for some Intel® Processors may allow escalation of privilege. Intel is releasing firmware updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2021-0157 Description: Insufficient control flow...

Insyde InsydeH2O has an unspecified vulnerability (CNVD-2022-10035)

Insyde H2OFFT is a set of tools for BIOS firmware development from Insyde Software Taiwan, China.Insyde InsydeH2O has a security vulnerability that could be exploited by attackers to gain control of the system via system administration mode privileges...

Intel Plugs 29 Holes in CPUs, Bluetooth, Security

Intel has unleashed 29 security advisories to plug up some serious bugs in the BIOS firmware for Intel processors, as well as in its Bluetooth products, Active Management Technology tools, the NUC Mini PC line, and, ironically, in its own security library. Details about the advisories can be foun...

Intel INTEL-SA-00463 安全漏洞

Intel INTEL-SA-00463 is the BIOS firmware for Intel® processors from Intel Corporation USA. A security vulnerability exists in INTEL-SA-00463, which stems from an improper initialization of the processor's firmware could allow a privileged user to enable privileged escalation via local access...

2021.1 IPU – BIOS Advisory

Summary: Potential security vulnerabilities in the BIOS firmware for some Intel® Processors may allow escalation of privilege or denial of service. Intel is releasing firmware updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2020-12357 Description: Improper...

PT-2021-7227 · Intel · Intel Processors

Name of the Vulnerable Software and Affected Versions: IntelR Processors affected versions not specified Description: The issue is related to an out-of-bounds write in the BIOS authenticated code module for some IntelR Processors. This may allow a privileged user to potentially enable escalation ...

CVE-2020-8672

Out of bound read in BIOS firmware for 8th, 9th Generation IntelR CoreTM, IntelR CeleronR Processor 4000 Series Processors may allow an unauthenticated user to potentially enable elevation of privilege or denial of service via local access...

Privilege escalation

Out of bound read in BIOS firmware for 8th, 9th Generation IntelR CoreTM, IntelR CeleronR Processor 4000 Series Processors may allow an unauthenticated user to potentially enable elevation of privilege or denial of service via local access...

CVE-2020-8672

CVE-2020-8672 describes an out-of-bounds read in BIOS firmware for 8th/9th Gen Intel Core and Intel Celeron 4000 Series processors that may allow an unauthenticated local attacker to elevate privileges or cause a denial of service. The vulnerability is documented in Intel’s BIOS advisory (INTEL-S...