Privilege escalation

Uncontrolled search path element in the IntelR Processor Diagnostic Tool before version 4.1.5.37 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2021-0089

CVE-2021-0089 concerns an observable response discrepancy in some Intel processors that could let an authorized local user potentially disclose information. The connected sources corroborate that this is a processor/CPU issue affecting Intel CPUs and related Xen/Citrix contexts, with the primary ...

CVE-2020-24486

Improper input validation in the firmware for some IntelR Processors may allow an authenticated user to potentially enable denial of service via local access...

CVE-2020-24486

CVE-2020-24486 is an Intel firmware vulnerability caused by improper input validation in the firmware of some Intel processors. An authenticated local attacker could potentially cause a denial of service. The issue is described in Intel’s advisory as part of a family of firmware vulnerabilities; ...

CVE-2020-12358

Out of bounds write in the firmware for some IntelR Processors may allow a privileged user to potentially enable denial of service via local access...

CVE-2020-8700

Affected software/hardware: Intel processors firmware. Root cause: Improper input validation in the firmware. Impact: Privilege escalation via local access by a privileged user; confidentiality, integrity, and availability may be affected (CVSS v3.1 base 6.7). Exploitation info: Not detailed in t...

CVE-2020-12357

CVE-2020-12357 describes an improper initialization in the firmware for some Intel processors that could allow a privileged user to escalate privileges via local access. The vulnerability is documented in Intel’s IPU BIOS advisory (INTEL-SA-00463) and is linked to the same family of processor fir...

CVE-2020-8702

CVE-2020-8702 affects the Intel Processor Diagnostic Tool prior to version 4.1.5.37. The issue is an uncontrolled search path element that could allow an authenticated local user to escalate privileges. The CVSS v3.1 base score is 7.3 (HIGH) with LOCAL attack vector, privileges required: LOW, use...

CVE-2020-8702

Uncontrolled search path element in the IntelR Processor Diagnostic Tool before version 4.1.5.37 may allow an authenticated user to potentially enable escalation of privilege via local access...

Intel INTEL-SA-00463 缓冲区错误漏洞

Intel INTEL-SA-00463 is the BIOS firmware for Intel® processors from Intel Corporation USA. INTEL-SA-00463 suffers from a buffer error vulnerability that stems from a processor firmware out-of-bounds write that could allow a privileged user to enable denial of service via local access...

Intel® Processor Diagnostics Tool Advisory

Summary: A potential security vulnerability in the Intel® Processor Diagnostics Tool may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2020-8702 Description: Uncontrolled search path element in the...

Intel Processors 输入验证错误漏洞

Intel Processors are American Intel Corporation's offerings for interpreting computer instructions and processing data in computer software. An input validation error vulnerability exists in the firmware of Intel Processors, which arises from a network system or product that does not properly...

About the security content of Boot Camp 6.1.14

About the security content of Boot Camp 6.1.14 This document describes the security content of Boot Camp 6.1.14. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are...

Moderate: Red Hat Bug Fix Advisory: microcode_ctl bug fix and enhancement update

An update for microcodectl is now available for Red Hat Enterprise Linux 8. The microcodectl packages provide microcode updates for Intel and AMD processors. Bug Fixes and Enhancements: rhel-8.3.0.z HPEMC 8.3.z REGRESSION Regression in intel microcode as of 20201110 BZ1907898...

hw: Vector Register Leakage-Active

A flaw was found in the Intel Advanced Vector Extensions AVX implementation, where a local authenticated attacker with the ability to execute AVX instructions can gather the AVX register state from previous AVX executions. This vulnerability allows information disclosure of the AVX register state...

Vulnerability of Intel processor BIOS microprogramming software, allowing attackers to enhance their privileges

The vulnerability of Intel processor BIOS microprogramming software is related to access control deficiencies. Exploiting this vulnerability can allow attackers to enhance their privileges...

Vulnerability of Intel processor BIOS microprogramming software, allowing attackers to enhance their privileges

The vulnerability of Intel processor BIOS microprogramming software is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

Vulnerability of Intel processor BIOS microprogramming software, allowing attackers to enhance their privileges

The vulnerability of Intel processor BIOS microprogramming software is related to writing beyond the buffer boundaries of memory. Exploiting this vulnerability can allow an attacker to enhance their privileges...

The vulnerability of the potentially dangerous function of Intel processor BIOS microprogramming software, which allows a hacker to enhance their privileges

The vulnerability of the potentially dangerous function of Intel processor BIOS microprogramming software is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of Intel RAPL processor interfaces, which allows attackers to disclose protected information

The vulnerability of Intel RAPL processors lies in the lack of protection for system data. Exploiting this vulnerability can allow attackers to disclose sensitive information that should be protected...