1340 matches found
CVE-2022-23830: Undefined Security Weakness
SMM configuration may not be immutable, as intended, when SNP is enabled resulting in a potential limited loss of guest memory integrity...
CVE-2022-23820: Improper Input Validation
Failure to validate the AMD SMM communication buffer may allow an attacker to corrupt the SMRAM potentially leading to arbitrary code execution...
CVE-2023-20565: Improper Privilege Management
Insufficient protections in System Management Mode SMM code may allow an attacker to potentially enable escalation of privilege via local access...
CVE-2023-20563: Improper Privilege Management
Insufficient protections in System Management Mode SMM code may allow an attacker to potentially enable escalation of privilege via local access...
CVE-2023-20596: Undefined Security Weakness
Improper input validation in the SMM Supervisor may allow an attacker with a compromised SMI handler to gain Ring0 access potentially leading to arbitrary code execution...
CVE-2023-20571: Concurrent Execution using Shared Resource with Improper Synchronization
A race condition in System Management Mode SMM code may allow an attacker using a compromised user space to leverage CVE-2018-8897 potentially resulting in privilege escalation...
AMD SMM Supervisor Vulnerability Security Notice
Bulletin ID: AMD-SB-7011 Potential Impact: Loss of confidentiality, integrity, and availability Severity: High Summary External researchers reported a potential vulnerability during SMM Supervisor initialization which may impact some AMD processors. On systems that do not have Supervisor Mode...
CVE-2023-45078
A memory leakage vulnerability was reported in the DustFilterAlertSmm SMM driver that may allow a local attacker with elevated privileges to write to NVRAM variables...
CVE-2023-45079
A memory leakage vulnerability was reported in the NvmramSmm SMM driver that may allow a local attacker with elevated privileges to write to NVRAM variables...
Memory corruption
A memory leakage vulnerability was reported in the NvmramSmm SMM driver that may allow a local attacker with elevated privileges to write to NVRAM variables...
CVE-2023-45079
A memory leakage vulnerability was reported in the NvmramSmm SMM driver that may allow a local attacker with elevated privileges to write to NVRAM variables...
CVE-2023-45079
CVE-2023-45079 is a memory-leakage issue in the NvmramSmm SMM driver that could allow a local privileged attacker to write to NVRAM variables. Documents consistently describe the vulnerable component as the NvmramSmm SMM driver and the impact as local access with high confidentiality, integrity, ...
CVE-2023-45079
A memory leakage vulnerability was reported in the NvmramSmm SMM driver that may allow a local attacker with elevated privileges to write to NVRAM variables...
CVE-2023-45078
CVE-2023-45078 : A memory leakage vulnerability in the DustFilterAlertSmm SMM driver may allow a local, privileged attacker to write to NVRAM variables. Documents indicate impact as confidentiality/ integrity/ availability HIGH, with a local attack vector and low complexity, but exploitation deta...
CVE-2023-45079: Out-of-bounds Read
A memory leakage vulnerability was reported in the NvmramSmm SMM driver that may allow a local attacker with elevated privileges to write to NVRAM variables...
PT-2023-29397
Name of the Vulnerable Software and Affected Versions DustFilterAlertSmm SMM driver affected versions not specified Description A memory leakage issue was reported in the DustFilterAlertSmm SMM driver, potentially allowing a local attacker with elevated privileges to write to NVRAM variables...
CVE-2023-39283
An SMM memory corruption vulnerability in the SMM driver SMRAM write in CsmInt10HookSmm in Insyde InsydeH2O with kernel 5.0 through 5.5 allows attackers to send arbitrary data to SMM which could lead to privilege escalation...
CVE-2023-39283
An SMM memory corruption vulnerability in the SMM driver SMRAM write in CsmInt10HookSmm in Insyde InsydeH2O with kernel 5.0 through 5.5 allows attackers to send arbitrary data to SMM which could lead to privilege escalation...
Memory corruption
An SMM memory corruption vulnerability in the SMM driver SMRAM write in CsmInt10HookSmm in Insyde InsydeH2O with kernel 5.0 through 5.5 allows attackers to send arbitrary data to SMM which could lead to privilege escalation...