CVE-2021-33077

Insufficient control flow management in firmware for some IntelR SSD, IntelR OptaneTM SSD and IntelR SSD DC Products may allow an unauthenticated user to potentially enable escalation of privilege via physical access...

CVE-2021-33077

Insufficient control flow management in firmware for some IntelR SSD, IntelR OptaneTM SSD and IntelR SSD DC Products may allow an unauthenticated user to potentially enable escalation of privilege via physical access...

Design/Logic Flaw

Insufficient control flow management in the BIOS firmware for some IntelR Processors may allow a privileged user to potentially enable aescalation of privilege via local access...

Design/Logic Flaw

Insufficient control flow management in firmware for some IntelR SSD, IntelR OptaneTM SSD and IntelR SSD DC Products may allow an unauthenticated user to potentially enable escalation of privilege via physical access...

CVE-2021-33122

Insufficient control flow management in the BIOS firmware for some IntelR Processors may allow a privileged user to potentially enable aescalation of privilege via local access...

CVE-2021-33122

CVE-2021-33122 corresponds to Intel BIOS firmware issues affecting several Intel processors where insufficient control flow management in the BIOS authenticated code module may permit a privileged user to escalate privileges locally. The Intel advisory INTEL-SA-00601 documents this vulnerability ...

CVE-2021-33122

Insufficient control flow management in the BIOS firmware for some IntelR Processors may allow a privileged user to potentially enable aescalation of privilege via local access...

CVE-2021-33077

Insufficient control flow management in firmware for some IntelR SSD, IntelR OptaneTM SSD and IntelR SSD DC Products may allow an unauthenticated user to potentially enable escalation of privilege via physical access...

CVE-2022-21128

Insufficient control flow management in the IntelR Advisor software before version 7.6.0.37 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-21128

Insufficient control flow management in the IntelR Advisor software before version 7.6.0.37 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-21128

CVE-2022-21128 affects Intel® Advisor prior to version 7.6.0.37. The issue is insufficient control flow management that may allow an authenticated user to escalate privileges via local access. CVSSv3.1 metrics shown in the connected records indicate a local, low-privilege, non‑interactive vector ...

Intel Advisor 安全漏洞

Intel Advisor is a design and analysis tool for developing high-performance code from Intel Corporation USA. A security vulnerability exists in Intel Advisor versions prior to 7.6.0.37, which stems from inadequate control flow management. The vulnerability can be exploited by an authenticated use...

2020.2 IPU – Intel® CSME, SPS, TXE, and AMT Advisory

Summary: Potential security vulnerabilities in Intel® Converged Security and Manageability Engine CSME, Server Platform Services SPS, Intel® Trusted Execution Engine TXE, Intel® Dynamic Application Loader DAL, Intel® Active Management Technology AMT, Intel® Standard Manageability ISM and Intel®...

Intel Memory Bug Poses Risk for Hundreds of Products

Chipmaker Intel is reporting a memory bug impacting microprocessor firmware used in “hundreds” of products. According to an advisory issued by the company on Tuesday, the bug is firmware-based and rated as “high” risk with a Common Vulnerability Scoring System CVSS score of 7. The vulnerability...

Intel BIOS firmware 安全漏洞

Intel BIOS firmware is a set of programs from the U.S. company Intel that are solidified onto a ROM chip on the motherboard inside a computer. A security vulnerability exists in the Intel BIOS firmware, which stems from inadequate control flow management in the BIOS firmware, and can be exploited...

Security Bulletin: Multiple Vulnerabilities in Intel Processors affect Cloud Pak System

Summary Multiple Vulnerabilities in Intel Processors affect Cloud Pak System. Cloud Pak System has addressed these vulnerabilities. Vulnerability Details CVEID: CVE-2020-8700 DESCRIPTION: Intel Processors could allow a local authenticated attacker to gain elevated privileges on the system, caused...

PT-2022-3553

Name of the Vulnerable Software and Affected Versions ESAPI versions prior to 2.3.0.0 Description The default implementation of Validator.getValidDirectoryPathString, String, File, boolean may incorrectly treat the tested input string as a child of the specified parent directory. This potentially...

CVE-2021-44486

An issue was discovered in YottaDB through r1.32 and V7.0-000. Using crafted input, attackers can manipulate the value of a function pointer used in opwrite in srport/opwrite.c in order to gain control of the flow of execution...

USN-5375-1: GNU cflow vulnerability

It was discovered that GNU cflow was incorrectly handling memory cleanup operations at the end of a compilation module. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code...

CVE-2021-33061

A denial of service flaw was found in the Linux kernel due to insufficient control flow management for the IntelR 82599 Ethernet Controllers and Adapters. This flaw allows a locally authenticated user to potentially cause a denial of service. The highest threat from this vulnerability is to syste...