CVE-2022-0004

Hardware debug modes and processor INIT setting that allow override of locks for some IntelR Processors in IntelR Boot Guard and IntelR TXT may allow an unauthenticated user to potentially enable escalation of privilege via physical access...

CVE-2021-0155

Unchecked return value in the BIOS firmware for some IntelR Processors may allow a privileged user to potentially enable information disclosure via local access...

CVE-2021-0188

Return of pointer value outside of expected range in the BIOS firmware for some IntelR Processors may allow a privileged user to potentially enable aescalation of privilege via local access...

CVE-2021-0154

Improper input validation in the BIOS firmware for some IntelR Processors may allow a privileged user to potentially enable aescalation of privilege via local access...

CVE-2021-0189

Use of out-of-range pointer offset in the BIOS firmware for some IntelR Processors may allow a privileged user to potentially enable aescalation of privilege via local access...

Information disclosure

Sensitive information accessible by physical probing of JTAG interface for some IntelR Processors with SGX may allow an unprivileged user to potentially enable information disclosure via physical access...

Improper access control

Improper access control in the BIOS authenticated code module for some IntelR Processors may allow a privileged user to potentially enable aescalation of privilege via local access...

Information disclosure

Processor optimization removal or modification of security-critical code for some IntelR Processors may allow an authenticated user to potentially enable information disclosure via local access...

Design/Logic Flaw

Unintended intermediary in the BIOS authenticated code module for some IntelR Processors may allow a privileged user to potentially enable aescalation of privilege via local access...

Cross site scripting

Out-of-bounds write in the BIOS firmware for some IntelR Processors may allow a privileged user to potentially enable aescalation of privilege via local access...

Input validation

Improper input validation in the BIOS authenticated code module for some IntelR Processors may allow a privileged user to potentially enable aescalation of privilege via local access...

Information disclosure

Unchecked return value in the BIOS firmware for some IntelR Processors may allow a privileged user to potentially enable information disclosure via local access...

Null pointer dereference

Use of out-of-range pointer offset in the BIOS firmware for some IntelR Processors may allow a privileged user to potentially enable aescalation of privilege via local access...

Design/Logic Flaw

Observable behavioral discrepancy in some IntelR Processors may allow an authorized user to potentially enable information disclosure via local access...

Design/Logic Flaw

Return of pointer value outside of expected range in the BIOS firmware for some IntelR Processors may allow a privileged user to potentially enable aescalation of privilege via local access...

Input validation

Improper input validation in the BIOS firmware for some IntelR Processors may allow a privileged user to potentially enable aescalation of privilege via local access...

Design/Logic Flaw

Hardware debug modes and processor INIT setting that allow override of locks for some IntelR Processors in IntelR Boot Guard and IntelR TXT may allow an unauthenticated user to potentially enable escalation of privilege via physical access...

Cross site scripting

Out-of-bounds write in the BIOS authenticated code module for some IntelR Processors may allow a privileged user to potentially enable aescalation of privilege via local access...

CVE-2021-0155

Unchecked return value in the BIOS firmware for some IntelR Processors may allow a privileged user to potentially enable information disclosure via local access...

CVE-2021-0155

CVE-2021-0155 is an Intel BIOS/BIOS authenticated code vulnerability: an unchecked return value in BIOS firmware may allow a local privileged user to disclose information. Intel/INTEL-SA-00601 documents this as a potential information-disclosure/privil ege-escalation issue affecting multiple Inte...