CVE-2025-35973: Improper Handling of Values

Improper handling of values for some IntelR Processors within Ring 0: Kernel, Hypervisor and Bare Metal OS may allow an escalation of privilege. Authorized adversary with a privileged user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur...

CVE-2026-20716: Improper Access Control

Improper access control for some IntelR Processors within Ring 3: User Applications may allow an escalation of privilege. Simple hardware adversary with an authenticated user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via local...

CVE-2026-20917: Exposure of Sensitive Information caused by Incorrect Data Forwarding during Transient Execution

Exposure of sensitive information caused by incorrect data forwarding during transient execution for some IntelR Processors within Ring 0: Hypervisor and Kernel may allow information disclosure. System software adversary with a privileged user combined with a high complexity attack may enable dat...

CVE-2026-20760: Improper Handling of Overlap Between Protected Memory Ranges

Improper handling of overlap between protected memory ranges in some microcode for some IntelR Processors within Ring 0: Hypervisor may allow an escalation of privilege. Authorized adversary with a privileged user combined with a low complexity attack may enable escalation of privilege. This resu...

CVE-2025-35979: Exposure of Sensitive Information caused by Shared Microarchitectural Predictor State that Influences Transient Execution

Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient execution for some IntelR Processors within VMX non-root guest operation may allow an information disclosure. Unprivileged software adversary with an authenticated user combined with a...

CVE-2025-20109: Improper Isolation or Compartmentalization

Improper Isolation or Compartmentalization in the stream cache mechanism for some IntelR Processors may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-28956: Exposure of Sensitive Information in Shared Microarchitectural Structures during Transient Execution

Exposure of Sensitive Information in Shared Microarchitectural Structures during Transient Execution for some IntelR Processors may allow an authenticated user to potentially enable information disclosure via local access...

CVE-2025-20103: Insufficient Resource Pool

Insufficient resource pool in the core management mechanism for some IntelR Processors may allow an authenticated user to potentially enable denial of service via local access...

CVE-2025-20054: Uncaught Exception

Uncaught exception in the core management mechanism for some IntelR Processors may allow an authenticated user to potentially enable denial of service via local access...

CVE-2024-45332: Exposure of Sensitive Information caused by Shared Microarchitectural Predictor State that Influences Transient Execution

Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient execution in the indirect branch predictors for some IntelR Processors may allow an authenticated user to potentially enable information disclosure via local access...

CVE-2022-28693: Unprotected Alternate Channel

Unprotected alternative channel of return branch target prediction in some IntelR Processors may allow an authorized user to potentially enable information disclosure via local access...

CVE-2024-36293: Improper Access Control

Improper access control in the EDECCSSA user leaf function for some IntelR Processors with IntelR SGX may allow an authenticated user to potentially enable denial of service via local access...

CVE-2023-34440: Improper Input Validation

Improper input validation in UEFI firmware for some IntelR Processors may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2024-39279: Insufficient Granularity of Access Control

Insufficient granularity of access control in UEFI firmware in some IntelR processors may allow a authenticated user to potentially enable denial of service via local access...

CVE-2024-31157: Improper Initialization

Improper initialization in UEFI firmware OutOfBandXML module in some IntelR Processors may allow a privileged user to potentially enable information disclosure via local access...

CVE-2024-28047: Improper Input Validation

Improper input validation in UEFI firmware for some IntelR Processors may allow a privileged user to potentially enable information disclosure via local access...

CVE-2023-43758: Improper Input Validation

Improper input validation in UEFI firmware for some IntelR processors may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2024-31068: Improper Finite State Machines (FSMs) in Hardware Logic

Improper Finite State Machines FSMs in Hardware Logic for some IntelR Processors may allow privileged user to potentially enable denial of service via local access...

CVE-2024-31155: Improper Restriction of Operations within the Bounds of a Memory Buffer

Improper buffer restrictions in the UEFI firmware for some IntelR Processors may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2024-21859: Improper Restriction of Operations within the Bounds of a Memory Buffer

Improper buffer restrictions in the UEFI firmware for some IntelR Processors may allow a privileged user to potentially enable information disclosure via local access...