5162 matches found
Oracle Linux 7 : microcode_ctl (ELSA-2020-5083)
The remote Oracle Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2020-5083 advisory. - Update Intel CPU microcode to microcode-20201027 release, addresses CVE-2020-8694, CVE-2020-8695, CVE-2020-8696, CVE-2020-8698 1893261, 1893249,...
Information Disclosure
Linux kernel is vulnerable to Information Disclosure. The vulnerability exists due to insufficient access control in the Linux kernel driver for some IntelR Processors. This flaw may allow an authenticated user to potentially enable information disclosure through local access...
Vulnerability fixed in Intel processors
A vulnerability has been fixed in some Intel processors. The vulnerability allows a local malicious person to obtain elevated privileges. Intel has released firmware updates to fix the vulnerability. fix. More information can be found on the page below:...
MGASA-2020-0422 Updated microcode package fixes security vulnerabilities
Insufficient access control in the Linux kernel driver for some IntelR Processors may allow an authenticated user to potentially enable information disclosure via local access. CVE-2020-8694 Observable discrepancy in the RAPL interface for some IntelR Processors may allow a privileged user to...
Updated microcode package fixes security vulnerabilities
Insufficient access control in the Linux kernel driver for some IntelR Processors may allow an authenticated user to potentially enable information disclosure via local access. CVE-2020-8694 Observable discrepancy in the RAPL interface for some IntelR Processors may allow a privileged user to...
CVE-2020-0599
Improper access control in the PMC for some IntelR Processors may allow a privileged user to potentially enable escalation of privilege via local access...
Improper access control
Improper access control in the PMC for some IntelR Processors may allow a privileged user to potentially enable escalation of privilege via local access...
CVE-2020-0599
CVE-2020-0599 describes an improper access control vulnerability in the Intel Power Management Controller (PMC) that could allow a privileged user to escalate privileges via local access. The CVSS1 (3.1) base score is 6.7 (Medium) with LOCAL access, LOW attack complexity, and HIGH impact on confi...
Microsoft Windows/Windows Server Elevation of Privilege Vulnerability (CNVD-2021-66107)
Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation, an operating system for personal devices, and Microsoft Windows Server, a server operating system. An elevation of privilege vulnerability exists in the Microsoft Windows/Windows Server print backend...
Microsoft Windows/Windows Server Remote Code Execution Vulnerability (CNVD-2021-62487)
Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation U.S. Microsoft Windows is an operating system for personal devices and Microsoft Windows Server is a server operating system. A remote code execution vulnerability exists in the Microsoft Windows/Windows...
CVE-2020-16273
In Arm software implementing the Armv8-M processors all versions, the stack selection mechanism could be influenced by a stack-underflow attack in v8-M TrustZone based processors. An attacker can cause a change to the stack pointer used by the Secure World from a non-secure application if the sta...
Stack overflow
In Arm software implementing the Armv8-M processors all versions, the stack selection mechanism could be influenced by a stack-underflow attack in v8-M TrustZone based processors. An attacker can cause a change to the stack pointer used by the Secure World from a non-secure application if the sta...
CVE-2020-16273
The vulnerability CVE-2020-16273 affects Armv8-M processors with the Security Extension. The stack selection mechanism can be influenced by a stack-underflow attack, allowing a non-secure application to alter the Secure World’s stack pointer if the stack isn’t initialized. This is tied to Arm sof...
CVE-2020-16273
In Arm software implementing the Armv8-M processors all versions, the stack selection mechanism could be influenced by a stack-underflow attack in v8-M TrustZone based processors. An attacker can cause a change to the stack pointer used by the Secure World from a non-secure application if the sta...
CVE-2020-8764
Improper access control in BIOS firmware for some IntelR Processors may allow a privileged user to potentially enable escalation of privilege via local access...
CVE-2020-8740
Out of bounds write in Intel BIOS platform sample code for some IntelR Processors may allow a privileged user to potentially enable escalation of privilege via local access...
CVE-2020-8695
Observable discrepancy in the RAPL interface for some IntelR Processors may allow a privileged user to potentially enable information disclosure via local access...
CVE-2020-8698
Improper isolation of shared resources in some IntelR Processors may allow an authenticated user to potentially enable information disclosure via local access...