CVE-2026-20901: Improper Input Validation

Improper input validation for some IntelR XeonR processors within firmware may allow an escalation of privilege. Startup code and smm adversary with a privileged user combined with a high complexity attack may enable data alteration. This result may potentially occur via local access when attack...

CVE-2026-20713: Always-Incorrect Control Flow Implementation

Always-incorrect control flow implementation in some firmware for some IntelR XeonR processors may allow an escalation of privilege. System software adversary with a privileged user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via...

CVE-2026-20898: Improper Access Control

Improper access control in the firmware for some in Alias Checking Trusted Module for some IntelR XeonR processors may allow an escalation of privilege. Startup code and SMM adversary with a privileged user combined with a high complexity attack may enable escalation of privilege. This result may...

CVE-2025-24305: Insufficient Control Flow Management

Insufficient control flow management in the Alias Checking Trusted Module ACTM firmware for some IntelR XeonR processors may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2025-21090: Missing Reference to Active Allocated Resource

Missing reference to active allocated resource for some IntelR XeonR processors may allow an authenticated user to potentially enable denial of service via local access...

CVE-2024-37020: Sequence of Processor Instructions Leads to Unexpected Behavior

Sequence of processor instructions leads to unexpected behavior in the IntelR DSA V1.0 for some IntelR XeonR Processors may allow an authenticated user to potentially enable denial of service via local access...

CVE-2024-25565: Insufficient Control Flow Management

Insufficient control flow management in UEFI firmware for some IntelR XeonR Processors may allow an authenticated user to enable denial of service via local access...

CVE-2024-21853: Improper Finite State Machines (FSMs) in Hardware Logic

Improper finite state machines FSMs in the hardware logic in some 4th and 5th Generation IntelR XeonR Processors may allow an authorized user to potentially enable denial of service via local access...

CVE-2024-24980: Protection Mechanism Failure

Protection mechanism failure in some 3rd, 4th, and 5th Generation IntelR XeonR Processors may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2023-32666: On-Chip Debug and Test Interface With Improper Access Control

On-chip debug and test interface with improper access control in some 4th Generation IntelR XeonR Processors when using IntelR SGX or IntelR TDX may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2023-22655: Protection Mechanism Failure

Protection mechanism failure in some 3rd and 4th Generation IntelR XeonR Processors when using IntelR SGX or IntelR TDX may allow a privileged user to potentially enable escalation of privilege via local access...

SUSE: Security Advisory (SUSE-SU-2023:3359-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2022-41804: Unauthorized Error Injection Can Degrade Hardware Redundancy

Unauthorized error injection in IntelR SGX or IntelR TDX for some IntelR XeonR Processors may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2022-33196: Incorrect Default Permissions

Incorrect default permissions in some memory controller configurations for some IntelR XeonR Processors when using IntelR Software Guard Extensions which may allow a privileged user to potentially enable escalation of privilege via local access...

PT-2023-9410

Name of the Vulnerable Software and Affected Versions IntelR XeonR Processors affected versions not specified Description The issue concerns incorrect default permissions in some memory controller configurations for IntelR XeonR Processors when using IntelR Software Guard Extensions. This may all...

CVE-2022-21131: Undefined Security Weakness

Improper access control for some IntelR XeonR Processors may allow an authenticated user to potentially enable information disclosure via local access...

CVE-2022-21136: Improper Input Validation

Improper input validation for some IntelR XeonR Processors may allow a privileged user to potentially enable denial of service via local access...

CVE-2019-0152: Improper Restriction of Operations within the Bounds of a Memory Buffer

Insufficient memory protection in System Management Mode SMM and IntelR TXT for certain IntelR XeonR Processors may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2019-0151: Improper Restriction of Operations within the Bounds of a Memory Buffer

Insufficient memory protection in IntelR TXT for certain IntelR Core Processors and IntelR XeonR Processors may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2019-11136: Undefined Security Weakness

Insufficient access control in system firmware for IntelR XeonR Scalable Processors, 2nd Generation IntelR XeonR Scalable Processors and IntelR XeonR Processors D Family may allow a privileged user to potentially enable escalation of privilege, denial of service and/or information disclosure via...