CVE-2026-20898

Improper access control in the firmware for some in Alias Checking Trusted Module for some IntelR XeonR processors may allow an escalation of privilege. Startup code and SMM adversary with a privileged user combined with a high complexity attack may enable escalation of privilege. This result may...

EUVD-2026-56474

Always-incorrect control flow implementation in some firmware for some IntelR XeonR processors may allow an escalation of privilege. System software adversary with a privileged user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via...

CVE-2026-20713

Always-incorrect control flow implementation in some firmware for some IntelR XeonR processors may allow an escalation of privilege. System software adversary with a privileged user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via...

CVE-2026-20713

The CVE-2026-20713 entry concerns Intel Xeon firmware with an always-incorrect control flow implementation. A system software adversary having privileged access and performing a high-complexity attack could achieve local privilege escalation without user interaction. The vulnerability affects the...

EUVD-2026-56472

Hardware logic contains race conditions for some 3rd Gen IntelR XeonR Scalable Processors within Ring 3: unprivileged software may allow a denial of service. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable denial of service. This result...

CVE-2026-20707

Hardware logic contains race conditions for some 3rd Gen IntelR XeonR Scalable Processors within Ring 3: unprivileged software may allow a denial of service. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable denial of service. This result...

CVE-2026-20707

CVE-2026-20707 involves race conditions in hardware logic for some 3rd Gen Intel Xeon Scalable Processors within Ring 3. An unprivileged, authenticated user with a high-complexity attack could potentially cause a denial of service, with local access requirements and no user interaction needed. Th...

CVE-2026-20707

Hardware logic contains race conditions for some 3rd Gen IntelR XeonR Scalable Processors within Ring 3: unprivileged software may allow a denial of service. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable denial of service. This result...

PT-2026-70280

Name of the Vulnerable Software and Affected Versions IntelR XeonR processors affected versions not specified Description An always-incorrect control flow implementation in the firmware may allow a system software adversary with privileged user access to escalate privileges. This issue requires a...

PT-2026-70272

Name of the Vulnerable Software and Affected Versions IntelR XeonR 6 processors affected versions not specified Description Improper handling of overlap between protected memory ranges occurs when using IntelR TDX Trust Domain Extensions, a technology for hardware-isolated virtual machines within...

HPESBHF05116 rev.1 - HPE ProLiant DL/ML/XD, Alletra, and Synergy Server Using Certain Intel Processors, INTEL-SA-01439, Intel Xeon processor with Alias Checking Trusted Module Advisory, Local Escalation of Privilege

Potential Security Impact: Local: Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Alletra Storage Server 4210 - Prior to v1.8005-29-2026 HPE ProLiant Compute DL110 Gen12 - Prior to v1.5007-24-2026 HPE ProLiant Compute DL320 Gen12 - Prior to...

HPESBHF05097 rev.1 - HPE ProLiant DL/ML/XD, Alletra, and Synergy Server Using Certain Intel Processors, INTEL-SA-01404, Intel Xeon 6 processor with Intel TDX Advisory, Local Disclosure of Information Vulnerability

Potential Security Impact: Local: Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Alletra Storage Server 4210 - Prior to v1.8005-29-2026 HPE ProLiant Compute DL110 Gen12 - Prior to v1.5007-24-2026 HPE ProLiant Compute DL320 Gen12 - Prior to...

Intel® Xeon® 6 processor with Intel® TDX Advisory

Summary: A potential security vulnerability in some Intel® Xeon® 6 processor with Intel® Trust Domain Extensions Intel® TDX may allow information disclosure. Intel is releasing a microcode update to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2025-31938 Description:...

PT-2026-70315

Name of the Vulnerable Software and Affected Versions IntelR XeonR processors affected versions not specified Description Improper access control in the firmware for the Alias Checking Trusted Module may allow an escalation of privilege. An adversary with access to startup code and System...

PT-2026-70792

Improper input validation for some IntelR XeonR processors within firmware may allow an escalation of privilege. Startup code and smm adversary with a privileged user combined with a high complexity attack may enable data alteration. This result may potentially occur via local access when attack...

PT-2026-70273

Name of the Vulnerable Software and Affected Versions IntelR XeonR 6 Scalable processors with IntelR TDX affected versions not specified Description Insufficient granularity of access control in a subsystem may allow an information disclosure. An authorized adversary with an authenticated user ca...

2026.3 IPU, Intel® Xeon® Processor Firmware Advisory

Summary: Potential security vulnerabilities in some Intel® Xeon® Processors may allow escalation of privilege. Intel is releasing microcode updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2026-20713 Description: Always-incorrect control flow implementation i...

Intel® Processor Firmware  Advisory - 01435

Summary: A potential security vulnerability in some Intel® Processors may allow escalation of privilege. Intel is releasing microcode updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2026-20716 Description: Improper access control for some Intel® Processors with...

Intel® Xeon® processor with Alias Checking Trusted Module Advisory

Summary: A potential security vulnerability in the Alias Checking Trusted Module for some Intel® Xeon® processor may allow escalation of privilege. Intel is releasing firmware updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2026-20898 Description: Improper acce...

PT-2026-70278

Name of the Vulnerable Software and Affected Versions 3rd Gen IntelR XeonR Scalable Processors affected versions not specified Description Hardware logic contains race conditions within Ring 3, which is the least privileged level of the CPU execution environment. An authenticated unprivileged loc...