115 matches found
CVE-2025-20028
Time-of-check time-of-use race condition in the WheaERST SMM module for some IntelR reference platforms may allow an escalation of privilege. System software adversary with a privileged user combined with a high complexity attack may enable escalation of privilege. This result may potentially occ...
CVE-2025-20027
CVE-2025-20027: Improper input validation in the UEFI WheaERST module on Intel reference platforms can allow local privilege escalation by a privileged user with high complexity. Affected items are Intel UEFI firmware components; exploitation requires local access and no user interaction. The CVS...
CVE-2025-20027
Improper input validation in the UEFI WheaERST module for some IntelR reference platforms may allow an escalation of privilege. System software adversary with a privileged user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via local...
CVE-2025-20096
Improper input validation in the UEFI firmware for some Intel Reference Platforms may allow an escalation of privilege. System software adversary with a privileged user combined with a high complexity attack may enable data manipulation. This result may potentially occur via local access when...
PT-2026-24497
Name of the Vulnerable Software and Affected Versions UEFI PdaSmm module for some IntelR reference platforms affected versions not specified Description A flaw exists in the UEFI PdaSmm module on certain IntelR reference platforms that could allow information disclosure. A system software adversa...
PT-2026-24493
Time-of-check time-of-use race condition in the WheaERST SMM module for some IntelR reference platforms may allow an escalation of privilege. System software adversary with a privileged user combined with a high complexity attack may enable escalation of privilege. This result may potentially occ...
PT-2026-24496
Improper input validation in some UEFI firmware SMM module for the IntelR reference platforms may allow an escalation of privilege. System software adversary with a privileged user combined with a low complexity attack may enable local code execution. This result may potentially occur via local...
PT-2026-24498
Name of the Vulnerable Software and Affected Versions UEFI PdaSmm module affected versions not specified Description A time-of-check time-of-use race condition exists in the UEFI PdaSmm module on certain Intel reference platforms, potentially leading to information disclosure. A system software...
PT-2026-24490
Improper input validation in the UEFI firmware for some Intel Reference Platforms may allow an escalation of privilege. System software adversary with a privileged user combined with a high complexity attack may enable data manipulation. This result may potentially occur via local access when...
PT-2026-24492
Improper input validation in the UEFI WheaERST module for some IntelR reference platforms may allow an escalation of privilege. System software adversary with a privileged user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via local...
PT-2026-7293
Name of the Vulnerable Software and Affected Versions IntelR Platform affected versions not specified Description A loop with an unreachable exit condition, potentially leading to an infinite loop, exists within Ring 0 of the kernel on some Intel platforms. This could allow a system software...
Intel® Server Firmware Advisory
Summary: A potential security vulnerability for some Intel® Platforms may allow denial of service. Intel is releasing microcode updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2025-27560 Description: Loop with unreachable exit condition 'infinite loop' for some...
CVE-2022-35407
An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. A stack buffer overflow leads to arbitrary code execution in the SetupUtility driver on Intel platforms. An attacker can change the values of certain UEFI variables. If the size of the second variable exceeds the size of the...
EulerOS 2.0 SP13 : cloud-init (EulerOS-SA-2025-2284)
According to the versions of the cloud-init package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : cloud-init is an industry-standard multi-distribution method for cross-platform cloud instance initialization by Canonical. There is a security...
EUVD-2008-4201
Malware in sbrugna...
EUVD-2010-2942
Malware in sbrugna...
EUVD-2017-14780
Malware in sbrugna...
EUVD-2008-2304
Malware in sbrugna...