CVE-2021-0159: Improper Input Validation

Improper input validation in the BIOS authenticated code module for some IntelR Processors may allow a privileged user to potentially enable aescalation of privilege via local access...

CVE-2022-21151: Undefined Security Weakness

Processor optimization removal or modification of security-critical code for some IntelR Processors may allow an authenticated user to potentially enable information disclosure via local access...

CVE-2021-0190: Improper Handling of Exceptional Conditions

Uncaught exception in the BIOS firmware for some IntelR Processors may allow a privileged user to potentially enable aescalation of privilege via local access...

CVE-2021-0154: Improper Input Validation

Improper input validation in the BIOS firmware for some IntelR Processors may allow a privileged user to potentially enable aescalation of privilege via local access...

CVE-2021-0188: Improper Restriction of Operations within the Bounds of a Memory Buffer

Return of pointer value outside of expected range in the BIOS firmware for some IntelR Processors may allow a privileged user to potentially enable aescalation of privilege via local access...

CVE-2021-33123: Undefined Security Weakness

Improper access control in the BIOS authenticated code module for some IntelR Processors may allow a privileged user to potentially enable aescalation of privilege via local access...

CVE-2021-0189: Improper Restriction of Operations within the Bounds of a Memory Buffer

Use of out-of-range pointer offset in the BIOS firmware for some IntelR Processors may allow a privileged user to potentially enable aescalation of privilege via local access...

CVE-2021-33103: Undefined Security Weakness

Unintended intermediary in the BIOS authenticated code module for some IntelR Processors may allow a privileged user to potentially enable aescalation of privilege via local access...

CVE-2021-33122: Undefined Security Weakness

Insufficient control flow management in the BIOS firmware for some IntelR Processors may allow a privileged user to potentially enable aescalation of privilege via local access...

CVE-2021-0153: Out-of-bounds Write

Out-of-bounds write in the BIOS firmware for some IntelR Processors may allow a privileged user to potentially enable aescalation of privilege via local access...

Privilege Escalation

intel-ucode is vulnerable to privilege escalation. The vulnerability exists due to a lack of sanitiztion during activation of test or debug logic at runtime for some IntelR processors which may allow an unauthenticated user to potentially enable escalation of privilege via physical access...

CVE-2022-0002: Undefined Security Weakness

Non-transparent sharing of branch predictor within a context in some IntelR Processors may allow an authorized user to potentially enable information disclosure via local access...

CVE-2022-0001: Undefined Security Weakness

Non-transparent sharing of branch predictor selectors between contexts in some IntelR Processors may allow an authorized user to potentially enable information disclosure via local access...

CVE-2021-0116

Out-of-bounds write in the firmware for some IntelR Processors may allow a privileged user to potentially enable an escalation of privilege via local access...

CVE-2021-0107: Unchecked Return Value

Unchecked return value in the firmware for some IntelR Processors may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2021-0099: Undefined Security Weakness

Insufficient control flow management in the firmware for some IntelR Processors may allow an authenticated user to potentially enable an escalation of privilege via local access...

CVE-2021-0091: Undefined Security Weakness

Improper access control in the firmware for some IntelR Processors may allow an unauthenticated user to potentially enable an escalation of privilege via local access...

CVE-2021-0127: Undefined Security Weakness

Insufficient control flow management in some IntelR Processors may allow an authenticated user to potentially enable a denial of service via local access...

CVE-2021-0092: Uncontrolled Resource Consumption

Improper access control in the firmware for some IntelR Processors may allow a privileged user to potentially enable a denial of service via local access...

CVE-2021-0145: Improper Initialization

Improper initialization of shared resources in some IntelR Processors may allow an authenticated user to potentially enable information disclosure via local access...