5889 matches found
Improper access control
Improper access control in the PMC for some IntelR Processors may allow a privileged user to potentially enable escalation of privilege via local access...
CVE-2020-0599
CVE-2020-0599 describes an improper access control vulnerability in the Intel Power Management Controller (PMC) that could allow a privileged user to escalate privileges via local access. The CVSS1 (3.1) base score is 6.7 (Medium) with LOCAL access, LOW attack complexity, and HIGH impact on confi...
PT-2020-11845
Name of the Vulnerable Software and Affected Versions IntelR Processors affected versions not specified Description The issue is related to improper access control in the PMC for some IntelR Processors, which may allow a privileged user to potentially enable escalation of privilege via local...
Microsoft Windows/Windows Server Remote Code Execution Vulnerability (CNVD-2021-62487)
Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation U.S. Microsoft Windows is an operating system for personal devices and Microsoft Windows Server is a server operating system. A remote code execution vulnerability exists in the Microsoft Windows/Windows...
Microsoft Windows/Windows Server Elevation of Privilege Vulnerability (CNVD-2021-66107)
Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation, an operating system for personal devices, and Microsoft Windows Server, a server operating system. An elevation of privilege vulnerability exists in the Microsoft Windows/Windows Server print backend...
CVE-2020-0599: Undefined Security Weakness
Improper access control in the PMC for some IntelR Processors may allow a privileged user to potentially enable escalation of privilege via local access...
CVE-2020-16273
In Arm software implementing the Armv8-M processors all versions, the stack selection mechanism could be influenced by a stack-underflow attack in v8-M TrustZone based processors. An attacker can cause a change to the stack pointer used by the Secure World from a non-secure application if the sta...
Stack overflow
In Arm software implementing the Armv8-M processors all versions, the stack selection mechanism could be influenced by a stack-underflow attack in v8-M TrustZone based processors. An attacker can cause a change to the stack pointer used by the Secure World from a non-secure application if the sta...
CVE-2020-16273
The vulnerability CVE-2020-16273 affects Armv8-M processors with the Security Extension. The stack selection mechanism can be influenced by a stack-underflow attack, allowing a non-secure application to alter the Secure World’s stack pointer if the stack isn’t initialized. This is tied to Arm sof...
CVE-2020-16273
In Arm software implementing the Armv8-M processors all versions, the stack selection mechanism could be influenced by a stack-underflow attack in v8-M TrustZone based processors. An attacker can cause a change to the stack pointer used by the Secure World from a non-secure application if the sta...
CVE-2020-8764
Improper access control in BIOS firmware for some IntelR Processors may allow a privileged user to potentially enable escalation of privilege via local access...
CVE-2020-8740
Out of bounds write in Intel BIOS platform sample code for some IntelR Processors may allow a privileged user to potentially enable escalation of privilege via local access...
CVE-2020-8694
Insufficient access control in the Linux kernel driver for some IntelR Processors may allow an authenticated user to potentially enable information disclosure via local access...
CVE-2020-8698
Improper isolation of shared resources in some IntelR Processors may allow an authenticated user to potentially enable information disclosure via local access...
CVE-2020-8696
Improper removal of sensitive information before storage or transfer in some IntelR Processors may allow an authenticated user to potentially enable information disclosure via local access...
DEBIAN-CVE-2020-8694
Insufficient access control in the Linux kernel driver for some IntelR Processors may allow an authenticated user to potentially enable information disclosure via local access...
CVE-2020-8694
Insufficient access control in the Linux kernel driver for some IntelR Processors may allow an authenticated user to potentially enable information disclosure via local access...
CVE-2020-8695
Observable discrepancy in the RAPL interface for some IntelR Processors may allow a privileged user to potentially enable information disclosure via local access...