CVE-2021-0188: Improper Restriction of Operations within the Bounds of a Memory Buffer

Return of pointer value outside of expected range in the BIOS firmware for some IntelR Processors may allow a privileged user to potentially enable aescalation of privilege via local access...

CVE-2021-33123: Undefined Security Weakness

Improper access control in the BIOS authenticated code module for some IntelR Processors may allow a privileged user to potentially enable aescalation of privilege via local access...

CVE-2022-21151: Undefined Security Weakness

Processor optimization removal or modification of security-critical code for some IntelR Processors may allow an authenticated user to potentially enable information disclosure via local access...

Privilege Escalation

intel-ucode is vulnerable to privilege escalation. The vulnerability exists due to a lack of sanitiztion during activation of test or debug logic at runtime for some IntelR processors which may allow an unauthenticated user to potentially enable escalation of privilege via physical access...

CVE-2022-0002

Non-transparent sharing of branch predictor within a context in some IntelR Processors may allow an authorized user to potentially enable information disclosure via local access...

CVE-2022-0002: Undefined Security Weakness

Non-transparent sharing of branch predictor within a context in some IntelR Processors may allow an authorized user to potentially enable information disclosure via local access...

CVE-2022-0001

Non-transparent sharing of branch predictor selectors between contexts in some IntelR Processors may allow an authorized user to potentially enable information disclosure via local access...

CVE-2022-0001: Undefined Security Weakness

Non-transparent sharing of branch predictor selectors between contexts in some IntelR Processors may allow an authorized user to potentially enable information disclosure via local access...

CVE-2021-0127

Insufficient control flow management in some IntelR Processors may allow an authenticated user to potentially enable a denial of service via local access...

CVE-2021-0145

Improper initialization of shared resources in some IntelR Processors may allow an authenticated user to potentially enable information disclosure via local access...

CVE-2021-0116

Out-of-bounds write in the firmware for some IntelR Processors may allow a privileged user to potentially enable an escalation of privilege via local access...

CVE-2021-0117: Undefined Security Weakness

Pointer issues in the firmware for some IntelR Processors may allow a privileged user to potentially enable an escalation of privilege via local access...

CVE-2021-0111: NULL Pointer Dereference

NULL pointer dereference in the firmware for some IntelR Processors may allow a privileged user to potentially enable an escalation of privilege via local access...

PT-2022-9094

Name of the Vulnerable Software and Affected Versions IntelR Processors affected versions not specified Description The issue is related to improper initialization in the firmware, which may allow a privileged user to potentially enable escalation of privilege via physical access. Recommendations...

CVE-2021-0124: Undefined Security Weakness

Improper access control in the firmware for some IntelR Processors may allow a privileged user to potentially enable escalation of privilege via physical access...

PT-2022-9091

Name of the Vulnerable Software and Affected Versions IntelR Processors affected versions not specified Description The issue is related to an out-of-bounds write in the firmware for some IntelR Processors. This may allow a privileged user to potentially enable an escalation of privilege via loca...

PT-2022-9086

Name of the Vulnerable Software and Affected Versions IntelR Processors affected versions not specified Description The issue is related to insufficient control flow management in the firmware for some IntelR Processors. This may allow an authenticated user to potentially enable an escalation of...

PT-2022-9083

Name of the Vulnerable Software and Affected Versions IntelR Processors affected versions not specified Description The issue is related to improper access control in the firmware for some IntelR Processors. This may allow an unauthenticated user to potentially enable an escalation of privilege v...

CVE-2021-0091: Undefined Security Weakness

Improper access control in the firmware for some IntelR Processors may allow an unauthenticated user to potentially enable an escalation of privilege via local access...

CVE-2021-0156: Improper Input Validation

Improper input validation in the firmware for some IntelR Processors may allow an authenticated user to potentially enable an escalation of privilege via local access...