CVE-2021-3661: Improper Control of Generation of Code

A potential security vulnerability has been identified in certain HP Workstation BIOS UEFI firmware which may allow arbitrary code execution. HP is releasing firmware mitigations for the potential vulnerability...

CVE-2022-37018: Incorrect Default Permissions

A potential vulnerability has been identified in the system BIOS for certain HP PC products which may allow escalation of privileges and code execution. HP is releasing firmware updates to mitigate the potential vulnerability...

Intel NUC 8 Compute Elements Access Control Error Vulnerability

Intel NUC is a small minicomputer from Intel U.S. Inc. IntelR NUC 8 Compute Elements CBWHL357.0096 previous versions have an access control error vulnerability, which stems from improper BIOS firmware access control and can be exploited by attackers for local privilege elevation...

CVE-2022-37334

Improper initialization in BIOS firmware for some IntelR NUC 11 Pro Kits and IntelR NUC 11 Pro Boards before version TNTGL357.0064 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-37334

Improper initialization in BIOS firmware for some IntelR NUC 11 Pro Kits and IntelR NUC 11 Pro Boards before version TNTGL357.0064 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-38099

Improper input validation in BIOS firmware for some IntelR NUC 11 Compute Elements before version EBTGL357.0065 may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2022-36789

Improper access control in BIOS firmware for some IntelR NUC 10 Performance Kits and IntelR NUC 10 Performance Mini PCs before version FNCML357.0053 may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2022-36789

Improper access control in BIOS firmware for some IntelR NUC 10 Performance Kits and IntelR NUC 10 Performance Mini PCs before version FNCML357.0053 may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2022-37345

Improper authentication in BIOS firmwareA1 for some IntelR NUC Kits before version RY0386 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-37345

Improper authentication in BIOS firmwareA1 for some IntelR NUC Kits before version RY0386 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-38099

Improper input validation in BIOS firmware for some IntelR NUC 11 Compute Elements before version EBTGL357.0065 may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2022-35276

Improper access control in BIOS firmware for some IntelR NUC 8 Compute Elements before version CBWHL357.0096 may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2022-36349

Insecure default variable initialization in BIOS firmware for some IntelR NUC Boards and IntelR NUC Kits before version MYi30060 may allow an authenticated user to potentially enable denial of service via local access...

CVE-2022-36349

Insecure default variable initialization in BIOS firmware for some IntelR NUC Boards and IntelR NUC Kits before version MYi30060 may allow an authenticated user to potentially enable denial of service via local access...

CVE-2022-34152

Improper input validation in BIOS firmware for some IntelR NUC Boards, IntelR NUC Kits before version TY0070 may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2022-35276

Improper access control in BIOS firmware for some IntelR NUC 8 Compute Elements before version CBWHL357.0096 may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2022-36370

Improper authentication in BIOS firmware for some IntelR NUC Boards and IntelR NUC Kits before version MYi30060 may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2022-33176

Improper input validation in BIOS firmware for some IntelR NUC 11 Performance kits and IntelR NUC 11 Performance Mini PCs before version PATGL357.0042 may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2022-33176

Improper input validation in BIOS firmware for some IntelR NUC 11 Performance kits and IntelR NUC 11 Performance Mini PCs before version PATGL357.0042 may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2022-36370

Improper authentication in BIOS firmware for some IntelR NUC Boards and IntelR NUC Kits before version MYi30060 may allow a privileged user to potentially enable escalation of privilege via local access...