PT-2023-12886 · Intel · Intel Processors

Name of the Vulnerable Software and Affected Versions: IntelR Processors affected versions not specified Description: The issue is related to improper input validation in the BIOS firmware for some IntelR Processors. This may allow a privileged user to potentially enable escalation of privilege v...

PT-2023-13060 · Intel · Intel Processors

Name of the Vulnerable Software and Affected Versions: IntelR Processors affected versions not specified Description: The issue is related to improper initialization in the BIOS firmware for some IntelR Processors. This may allow a privileged user to potentially enable escalation of privilege via...

CVE-2022-26343: Undefined Security Weakness

Improper access control in the BIOS firmware for some IntelR Processors may allow a privileged user to potentially enable escalation of privilege via local access...

PT-2023-13749

Name of the Vulnerable Software and Affected Versions Acer Aspire E5-475G affected versions not specified Description The issue concerns a stack overflow vulnerability in the BIOS firmware of the affected device. Specifically, it is located in the FpGui module. A local attacker can exploit this b...

Intel® NUC Firmware Advisory

Summary: Potential security vulnerabilities in some Intel® NUC BIOS firmware may allow escalation of privilege or denial of service. Intel is releasing firmware updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2021-33164 Description: Improper access control i...

CVE-2022-40080

Stack overflow vulnerability in Aspire E5-475G 's BIOS firmware, in the FpGui module, a second call to GetVariable services allows local attackers to execute arbitrary code in the UEFI DXE phase and gain escalated privileges...

CVE-2021-0187

Improper access control in the BIOS firmware for some IntelR Processors may allow a privileged user to potentially enable an escalation of privilege via local access...

CVE-2022-40080

CVE-2022-40080 affects the Aspire E5-475G BIOS firmware, specifically the FpGui module. The vulnerability arises from a second call to the GetVariable service, which can be exploited in the UEFI DXE phase to allow a local attacker to execute arbitrary code and escalate privileges. The available d...

CVE-2022-32231: Improper Initialization

Improper initialization in the BIOS firmware for some IntelR Processors may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2022-30539: Use After Free

Use after free in the BIOS firmware for some IntelR Processors may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2022-40080

Stack overflow vulnerability in Aspire E5-475G 's BIOS firmware, in the FpGui module, a second call to GetVariable services allows local attackers to execute arbitrary code in the UEFI DXE phase and gain escalated privileges...

Moderate: Red Hat Security Advisory: OpenShift Container Platform 4.10.52 security update

Red Hat OpenShift Container Platform release 4.10.52 is now available with updates to packages and images that fix several bugs and add enhancements. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, whic...

SUSE CVE-2017-17083

In Wireshark 2.4.0 to 2.4.2 and 2.2.0 to 2.2.10, the NetBIOS dissector could crash. This was addressed in epan/dissectors/packet-netbios.c by ensuring that write operations are bounded by the beginning of a buffer...

SUSE CVE-2019-14558

Insufficient control flow management in BIOS firmware for 8th, 9th, 10th Generation IntelR CoreTM, IntelR CeleronR Processor 4000 & 5000 Series Processors may allow an authenticated user to potentially enable denial of service via adjacent access...

SUSE CVE-2020-12944

Insufficient validation of BIOS image length by ASP Firmware could lead to arbitrary code execution...

SUSE CVE-2021-0158

Improper input validation in the BIOS firmware for some IntelR Processors may allow a privileged user to potentially enable escalation of privilege via local access...

SUSE CVE-2021-26388

Improper validation of the BIOS directory may allow for searches to read beyond the directory table copy in RAM, exposing out of bounds memory contents, resulting in a potential denial of service...

SUSE CVE-2021-33117

Improper access control for some 3rd Generation IntelR XeonR Scalable Processors before BIOS version MR7, may allow a local attacker to potentially enable information disclosure via local access...

Dell PowerEdge Server BIOS Buffer Overflow Vulnerability

Dell PowerEdge Server BIOS is a system update driver for Dell, a Dell USA company. Dell PowerEdge Server BIOS buffer overflow vulnerability, which stems from a SMM communication buffer validation error. A local attacker with elevated privileges could exploit this vulnerability to perform arbitrar...

The vulnerability of the BIOS component of AMD processors allows a hacker to trigger a system failure.

The vulnerability of the BIOS component of AMD processors exists due to insufficient checking of input data. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...