EUVD-2020-4615

Malware in sbrugna...

Design/Logic Flaw

Use after free in DAL subsystem for IntelR CSME versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70, 13.0.40, 13.30.10, 14.0.45 and 14.5.25, IntelR TXE 3.1.80, 4.0.30 may allow an authenticated user to potentially enable escalation of privileges via local access...

CVE-2020-12303

The CVE-2020-12303 entry concerns a use-after-free in the Intel CSME/DAL subsystem. Affected components include Intel CSME, TXE and DAL (and related SPS/ISM) with versions before 11.8.80/11.12.80/11.22.80/12.0.70/13.0.40/13.30.10/14.0.45/14.5.25 (CSME), and TXE before 3.1.80 or 4.0.30. The issue ...