CVE-2024-31157

Improper initialization in UEFI firmware OutOfBandXML module in some IntelR Processors may allow a privileged user to potentially enable information disclosure via local access...

CVE-2024-39279

Insufficient granularity of access control in UEFI firmware in some IntelR processors may allow a authenticated user to potentially enable denial of service via local access...

CVE-2024-28127

CVE-2024-28127 affects Intel processors via improper input validation in UEFI firmware, enabling local privilege escalation by a privileged user. Documented in various advisories and Debian/LTS updates; mitigations include Intel microcode updates (e.g., as part of intel-microcode packages) and fi...

CVE-2024-28127

Improper input validation in UEFI firmware for some IntelR Processors may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2024-28127

Improper input validation in UEFI firmware for some IntelR Processors may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2024-29214

Improper input validation in UEFI firmware CseVariableStorageSmm for some IntelR Processors may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2024-24582

Improper input validation in XmlCli feature for UEFI firmware for some IntelR processors may allow privileged user to potentially enable escalation of privilege via local access...

CVE-2024-24582

Improper input validation in XmlCli feature for UEFI firmware for some IntelR processors may allow privileged user to potentially enable escalation of privilege via local access...

CVE-2023-34440

Improper input validation in UEFI firmware for some IntelR Processors may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2023-34440

Improper input validation in UEFI firmware for some IntelR Processors may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2023-43758

CVE-2023-43758 involves improper input validation in UEFI firmware for certain Intel processors, enabling local privilege escalation. Connected sources confirm affected component is Intel microcode/UEFI handling and provide remediation details: Debian ETL advisory DLA-4095-1 lists intel-microcode...

CVE-2023-43758

Improper input validation in UEFI firmware for some IntelR processors may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2024-26021

Improper initialization in the firmware for some IntelR AMT and IntelR Standard Manageability may allow a privileged user to potentially enable information disclosure via local access...

CVE-2024-26021

Improper initialization in the firmware for some IntelR AMT and IntelR Standard Manageability may allow a privileged user to potentially enable information disclosure via local access...

CVE-2024-30211

CVE-2024-30211 describes an improper access control vulnerability in some Intel® ME driver pack installer engines prior to 2422.6.2.0, potentially allowing an authenticated user to escalate privileges via local access. The Intel advisory INTEL-SA-01152 and related Red Hat/Support documents confir...

CVE-2024-30211

Improper access control in some IntelR ME driver pack installer engines before version 2422.6.2.0 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-21859

Improper buffer restrictions in the UEFI firmware for some IntelR Processors may allow a privileged user to potentially enable information disclosure via local access...

CVE-2024-31155

CVE-2024-31155 concerns improper buffer restrictions in the UEFI firmware of some Intel processors, enabling potential local escalation of privilege by a privileged user. The vulnerability is documented with CVSS scores (3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H; 4.0/AV:L/AC:H/AT:P/PR:H/UI:N/VC:H/V...

CVE-2024-31155

Improper buffer restrictions in the UEFI firmware for some IntelR Processors may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2024-39779

Stack-based buffer overflow in some drivers for IntelR Ethernet Connection I219 Series before version 12.19.1.39 may allow an authenticated user to potentially enable denial of service via local access...