CVE-2022-32231: Improper Initialization

Improper initialization in the BIOS firmware for some IntelR Processors may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2022-30539: Use After Free

Use after free in the BIOS firmware for some IntelR Processors may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2022-38090: Insecure Storage of Sensitive Information

Improper isolation of shared resources in some IntelR Processors when using IntelR Software Guard Extensions may allow a privileged user to potentially enable information disclosure via local access...

CVE-2022-21198: Time-of-check Time-of-use (TOCTOU) Race Condition

Time-of-check time-of-use race condition in the BIOS firmware for some IntelR Processors may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2022-26006: Improper Input Validation

Improper input validation in the BIOS firmware for some IntelR Processors may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2022-21233: Undefined Security Weakness

Improper isolation of shared resources in some IntelR Processors may allow a privileged user to potentially enable information disclosure via local access...

CVE-2022-26373: Undefined Security Weakness

Non-transparent sharing of return predictor targets between contexts in some IntelR Processors may allow an authorized user to potentially enable information disclosure via local access...

CVE-2021-33060: Out-of-bounds Write

Out-of-bounds write in the BIOS firmware for some IntelR Processors may allow an authenticated user to potentially enable escalation of privilege via local access...

Information Disclosure

Iintel-microcode is vulnerable to information disclosure. The vulnerability exists due to incomplete cleanup in specific special register read operations for some IntelR Processors which may allow an authenticated user to potentially enable information disclosure via local access...

CVE-2022-21180: Improper Input Validation

Improper input validation for some IntelR Processors may allow an authenticated user to potentially cause a denial of service via local access...

CVE-2022-21127: Incomplete Cleanup

Incomplete cleanup in specific special register read operations for some IntelR Processors may allow an authenticated user to potentially enable information disclosure via local access...

CVE-2022-21123: Incomplete Cleanup

Incomplete cleanup of multi-core shared buffers for some IntelR Processors may allow an authenticated user to potentially enable information disclosure via local access...

CVE-2022-21166: Incomplete Cleanup

Incomplete cleanup in specific special register write operations for some IntelR Processors may allow an authenticated user to potentially enable information disclosure via local access...

CVE-2022-21125: Incomplete Cleanup

Incomplete cleanup of microarchitectural fill buffers on some IntelR Processors may allow an authenticated user to potentially enable information disclosure via local access...

CVE-2022-24436: Observable Discrepancy

Observable behavioral in power management throttling for some IntelR Processors may allow an authenticated user to potentially enable information disclosure via network access...

CVE-2022-0004: Undefined Security Weakness

Hardware debug modes and processor INIT setting that allow override of locks for some IntelR Processors in IntelR Boot Guard and IntelR TXT may allow an unauthenticated user to potentially enable escalation of privilege via physical access...

CVE-2021-33124: Out-of-bounds Write

Out-of-bounds write in the BIOS authenticated code module for some IntelR Processors may allow a privileged user to potentially enable aescalation of privilege via local access...

CVE-2021-0155: Unchecked Return Value

Unchecked return value in the BIOS firmware for some IntelR Processors may allow a privileged user to potentially enable information disclosure via local access...

CVE-2022-0005: Cleartext Transmission of Sensitive Information

Sensitive information accessible by physical probing of JTAG interface for some IntelR Processors with SGX may allow an unprivileged user to potentially enable information disclosure via physical access...

CVE-2021-33149: Observable Discrepancy

Observable behavioral discrepancy in some IntelR Processors may allow an authorized user to potentially enable information disclosure via local access...