CVE-2026-20713: Always-Incorrect Control Flow Implementation

Always-incorrect control flow implementation in some firmware for some IntelR XeonR processors may allow an escalation of privilege. System software adversary with a privileged user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via...

CVE-2026-20898: Improper Access Control

Improper access control in the firmware for some in Alias Checking Trusted Module for some IntelR XeonR processors may allow an escalation of privilege. Startup code and SMM adversary with a privileged user combined with a high complexity attack may enable escalation of privilege. This result may...

CVE-2026-20901: Improper Input Validation

Improper input validation for some IntelR XeonR processors within firmware may allow an escalation of privilege. Startup code and smm adversary with a privileged user combined with a high complexity attack may enable data alteration. This result may potentially occur via local access when attack...

CVE-2025-21090: Missing Reference to Active Allocated Resource

Missing reference to active allocated resource for some IntelR XeonR processors may allow an authenticated user to potentially enable denial of service via local access...

CVE-2025-24305: Insufficient Control Flow Management

Insufficient control flow management in the Alias Checking Trusted Module ACTM firmware for some IntelR XeonR processors may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2024-37020: Sequence of Processor Instructions Leads to Unexpected Behavior

Sequence of processor instructions leads to unexpected behavior in the IntelR DSA V1.0 for some IntelR XeonR Processors may allow an authenticated user to potentially enable denial of service via local access...

CVE-2024-21853: Improper Finite State Machines (FSMs) in Hardware Logic

Improper finite state machines FSMs in the hardware logic in some 4th and 5th Generation IntelR XeonR Processors may allow an authorized user to potentially enable denial of service via local access...

CVE-2024-25565: Insufficient Control Flow Management

Insufficient control flow management in UEFI firmware for some IntelR XeonR Processors may allow an authenticated user to enable denial of service via local access...

CVE-2024-24980: Protection Mechanism Failure

Protection mechanism failure in some 3rd, 4th, and 5th Generation IntelR XeonR Processors may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2023-32666: On-Chip Debug and Test Interface With Improper Access Control

On-chip debug and test interface with improper access control in some 4th Generation IntelR XeonR Processors when using IntelR SGX or IntelR TDX may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2023-22655: Protection Mechanism Failure

Protection mechanism failure in some 3rd and 4th Generation IntelR XeonR Processors when using IntelR SGX or IntelR TDX may allow a privileged user to potentially enable escalation of privilege via local access...

SUSE: Security Advisory (SUSE-SU-2023:3359-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2022-41804: Unauthorized Error Injection Can Degrade Hardware Redundancy

Unauthorized error injection in IntelR SGX or IntelR TDX for some IntelR XeonR Processors may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2022-33196: Incorrect Default Permissions

Incorrect default permissions in some memory controller configurations for some IntelR XeonR Processors when using IntelR Software Guard Extensions which may allow a privileged user to potentially enable escalation of privilege via local access...