60 matches found
2022.1 IPU - Intel® Processor Advisory
Summary: A potential security vulnerability in some Intel® Processors may allow information disclosure. Intel is releasing firmware updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2022-21151 Description: Processor optimization removal or modification of...
2021.1 IPU - Intel Atom® Processor Advisory
Summary: A potential security vulnerability in some Intel Atom® Processors may allow information disclosure. Intel is releasing firmware updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2020-24513 Description: Domain-bypass transient execution vulnerability in...
Intel® IPP and SGX Software Advisory
Summary: A potential security vulnerability in the Intel® Integrated Performance Primitives IPP Crypto Library may allow information disclosure. Intel® IPP is used by Intel® Software Guard Extension SGX, and Intel is releasing software updates to mitigate this potential vulnerability. Vulnerabili...
2020.2 IPU - Intel® Processor Advisory
Summary: Potential security vulnerabilities in some Intel® Processors may allow information disclosure. Intel is releasing firmware updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2020-8698 Description: Improper isolation of shared resources in some IntelR...
System Management Mode deep dive: How SMM isolation hardens the platform
Ensuring that the platform firmware is healthy and trustworthy is fundamental to guaranteeing that powerful platform security features like Hypervisor-protected code integrity HVCI and Windows Defender Credential Guard are functioning as expected. Windows 10 achieves this by leveraging a...
System Management Mode deep dive: How SMM isolation hardens the platform
Ensuring that the platform firmware is healthy and trustworthy is fundamental to guaranteeing that powerful platform security features like Hypervisor-protected code integrity HVCI and Windows Defender Credential Guard are functioning as expected. Windows 10 achieves this by leveraging a...
Special Register Buffer Data Sampling Advisory
Summary: A potential security vulnerability in some Intel® Processors may allow information disclosure. Intel is releasing firmware updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2020-0543 Description: Incomplete cleanup from specific special register read...
Intel Software Guard Extensions (SGX) Vulnerabilities - Lenovo Support US
No description provided...
Intel Software Guard Extensions (SGX) Vulnerabilities - US
Lenovo Security Advisory: LEN-21284 Potential Impact: Elevation of privilege, information disclosure Severity: High Scope of Impact: Industry-wide CVE Identifier: CVE-2017-5736, CVE-2018-3626, CVE-2018-3639, CVE-2018-3640, CVE-2018-3691 Summary Description: Intel has issued several advisories...
Design/Logic Flaw
The Telematics Control Unit aka Telematic Communication Box or TCB, when present on BMW vehicles produced in 2012 through 2018, allows a remote attack via a cellular network...
CVE-2018-9318
CVE-2018-9318 concerns BMW vehicles (2012–2018) with the Telematics Control Unit (TCB). The issue allows a remote attack over a cellular network by exploiting the TCB, with NVD indicating a critical impact (CVSSv3: 9.8, network, no user interaction, high confidentiality/integrity/availability). T...
CVE-2018-9318: Protection Mechanism Failure
The Telematics Control Unit aka Telematic Communication Box or TCB, when present on BMW vehicles produced in 2012 through 2018, allows a remote attack via a cellular network...
Google Android kernel elevation of privilege vulnerability
Android is a Linux-based open source operating system jointly developed by Google and the Open Handset Alliance OHA, and KernelTCB is one of the kernel thread control blocks. A privilege-lifting vulnerability exists in KernelTCB in Android. An attacker can exploit the vulnerability to bypass...
CVE-2017-0710
A elevation of privilege vulnerability in the Upstream Linux tcb. Product: Android. Versions: Android kernel. Android ID: A-34951864...
CVE-2017-0710
CVE-2017-0710 is an elevation-of-privilege vulnerability in the Android kernel (Upstream Linux tcb/KernelTCB). The CNVD entry describes a privilege-lifting issue in KernelTCB in Android where an attacker could bypass privilege validation and access arbitrary ptrace, enabling local privilege escal...
CVE-2017-0710
A elevation of privilege vulnerability in the Upstream Linux tcb. Product: Android. Versions: Android kernel. Android ID: A-34951864...
CVE-2017-0710: Undefined Security Weakness
A elevation of privilege vulnerability in the Upstream Linux tcb. Product: Android. Versions: Android kernel. Android ID: A-34951864...
SCO Unixware 7.1 pkgcat Buffer Overflow
No description provided by source. source: http://www.securityfocus.com/bid/853/info It is possible to view the entries in /etc/shadow through exploiting a buffer overflow in pkgcat and pkginstall. Though neither of these binaries are setuid, the dacread permissions which are granted in...
CVE-2009-0628
Memory leak in the SSLVPN feature in Cisco IOS 12.3 through 12.4 allows remote attackers to cause a denial of service memory consumption and device crash by disconnecting an SSL session in an abnormal manner, leading to a Transmission Control Block TCB leak...
CVE-2009-0628: Exposure of Sensitive Information to an Unauthorized Actor
Memory leak in the SSLVPN feature in Cisco IOS 12.3 through 12.4 allows remote attackers to cause a denial of service memory consumption and device crash by disconnecting an SSL session in an abnormal manner, leading to a Transmission Control Block TCB leak...