CVE-2021-0188: Improper Restriction of Operations within the Bounds of a Memory Buffer

Return of pointer value outside of expected range in the BIOS firmware for some IntelR Processors may allow a privileged user to potentially enable aescalation of privilege via local access...

CVE-2021-0159: Improper Input Validation

Improper input validation in the BIOS authenticated code module for some IntelR Processors may allow a privileged user to potentially enable aescalation of privilege via local access...

CVE-2021-0190: Improper Handling of Exceptional Conditions

Uncaught exception in the BIOS firmware for some IntelR Processors may allow a privileged user to potentially enable aescalation of privilege via local access...

CVE-2021-0154: Improper Input Validation

Improper input validation in the BIOS firmware for some IntelR Processors may allow a privileged user to potentially enable aescalation of privilege via local access...

CVE-2022-21151: Undefined Security Weakness

Processor optimization removal or modification of security-critical code for some IntelR Processors may allow an authenticated user to potentially enable information disclosure via local access...

CVE-2021-0193: Improper Authentication

Improper authentication in the IntelR In-Band Manageability software before version 2.13.0 may allow a privileged user to potentially enable escalation of privilege via network access...

CVE-2022-24382: Improper Input Validation

Improper input validation in firmware for some IntelR NUCs may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2022-21237: Improper Restriction of Operations within the Bounds of a Memory Buffer

Improper buffer access in firmware for some IntelR NUCs may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2022-24297: Undefined Security Weakness

Improper buffer restrictions in firmware for some IntelR NUCs may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2021-0126: Improper Input Validation

Improper input validation for the IntelR Manageability Commander before version 2.2 may allow an authenticated user to potentially enable escalation of privilege via adjacent access...

CVE-2022-22139: Uncontrolled Search Path Element

Uncontrolled search path in the IntelR XTU software before version 7.3.0.33 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2021-33074: Undefined Security Weakness

Protection mechanism failure in firmware for some IntelR SSD, IntelR SSD DC and IntelR OptaneTM SSD Products may allow an unauthenticated user to potentially enable information disclosure via physical access...

CVE-2021-33080: Improper Removal of Sensitive Information Before Storage or Transfer

Exposure of sensitive system information due to uncleared debug information in firmware for some IntelR SSD DC, IntelR OptaneTM SSD and IntelR OptaneTM SSD DC Products may allow an unauthenticated user to potentially enable information disclosure or escalation of privilege via physical access...

CVE-2021-33117: Undefined Security Weakness

Improper access control for some 3rd Generation IntelR XeonR Scalable Processors before BIOS version MR7, may allow a local attacker to potentially enable information disclosure via local access...

CVE-2021-0189: Improper Restriction of Operations within the Bounds of a Memory Buffer

Use of out-of-range pointer offset in the BIOS firmware for some IntelR Processors may allow a privileged user to potentially enable aescalation of privilege via local access...

CVE-2021-33122: Undefined Security Weakness

Insufficient control flow management in the BIOS firmware for some IntelR Processors may allow a privileged user to potentially enable aescalation of privilege via local access...

CVE-2021-33103: Undefined Security Weakness

Unintended intermediary in the BIOS authenticated code module for some IntelR Processors may allow a privileged user to potentially enable aescalation of privilege via local access...

CVE-2021-0153: Out-of-bounds Write

Out-of-bounds write in the BIOS firmware for some IntelR Processors may allow a privileged user to potentially enable aescalation of privilege via local access...

CVE-2021-0194: Undefined Security Weakness

Improper access control in the IntelR In-Band Manageability software before version 2.13.0 may allow a privileged user to potentially enable escalation of privilege via network access...

Privilege Escalation

intel-ucode is vulnerable to privilege escalation. The vulnerability exists due to a lack of sanitiztion during activation of test or debug logic at runtime for some IntelR processors which may allow an unauthenticated user to potentially enable escalation of privilege via physical access...