243 matches found
CVE-2022-26837: Improper Input Validation
Improper input validation in the BIOS firmware for some IntelR Processors may allow a privileged user to potentially enable escalation of privilege via local access...
PT-2023-12013
Name of the Vulnerable Software and Affected Versions IntelR Processors affected versions not specified Description The issue is related to improper access control in the BIOS firmware for some IntelR Processors, which may allow a privileged user to potentially enable an escalation of privilege v...
CVE-2021-0187: Undefined Security Weakness
Improper access control in the BIOS firmware for some IntelR Processors may allow a privileged user to potentially enable an escalation of privilege via local access...
CVE-2022-30704: Improper Initialization
Improper initialization in the IntelR TXT SINIT ACM for some IntelR Processors may allow a privileged user to potentially enable escalation of privilege via local access...
CVE-2022-32231: Improper Initialization
Improper initialization in the BIOS firmware for some IntelR Processors may allow a privileged user to potentially enable escalation of privilege via local access...
CVE-2022-38090: Insecure Storage of Sensitive Information
Improper isolation of shared resources in some IntelR Processors when using IntelR Software Guard Extensions may allow a privileged user to potentially enable information disclosure via local access...
CVE-2022-30539: Use After Free
Use after free in the BIOS firmware for some IntelR Processors may allow a privileged user to potentially enable escalation of privilege via local access...
CVE-2022-21198: Time-of-check Time-of-use (TOCTOU) Race Condition
Time-of-check time-of-use race condition in the BIOS firmware for some IntelR Processors may allow a privileged user to potentially enable escalation of privilege via local access...
CVE-2022-26006: Improper Input Validation
Improper input validation in the BIOS firmware for some IntelR Processors may allow a privileged user to potentially enable escalation of privilege via local access...
CVE-2022-21233
Improper isolation of shared resources in some IntelR Processors may allow a privileged user to potentially enable information disclosure via local access...
CVE-2022-26373
Non-transparent sharing of return predictor targets between contexts in some IntelR Processors may allow an authorized user to potentially enable information disclosure via local access...
CVE-2021-33060: Out-of-bounds Write
Out-of-bounds write in the BIOS firmware for some IntelR Processors may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2022-26373: Undefined Security Weakness
Non-transparent sharing of return predictor targets between contexts in some IntelR Processors may allow an authorized user to potentially enable information disclosure via local access...
CVE-2022-21233: Undefined Security Weakness
Improper isolation of shared resources in some IntelR Processors may allow a privileged user to potentially enable information disclosure via local access...
PT-2022-6330
Name of the Vulnerable Software and Affected Versions IntelR Processors affected versions not specified Description The issue is related to non-transparent sharing of return predictor targets between contexts in some IntelR Processors, which may allow an authorized user to potentially enable...
Information Disclosure
Iintel-microcode is vulnerable to information disclosure. The vulnerability exists due to incomplete cleanup in specific special register read operations for some IntelR Processors which may allow an authenticated user to potentially enable information disclosure via local access...
CVE-2022-21166
Incomplete cleanup in specific special register write operations for some IntelR Processors may allow an authenticated user to potentially enable information disclosure via local access...
CVE-2022-21127
Incomplete cleanup in specific special register read operations for some IntelR Processors may allow an authenticated user to potentially enable information disclosure via local access...