Intel Core Processors 安全漏洞

Intel Core Processors is an Intel Core family of central processing units CPUs from Intel Corporation USA. A security vulnerability exists in Intel Core Processors that arises from improper handling of physical or environmental conditions that could allow an authenticated user to enable denial of...

CVE-2024-37020: Sequence of Processor Instructions Leads to Unexpected Behavior

Sequence of processor instructions leads to unexpected behavior in the IntelR DSA V1.0 for some IntelR XeonR Processors may allow an authenticated user to potentially enable denial of service via local access...

Intel Processors 输入验证错误漏洞

Intel Processors are a family of processors from Intel Corporation USA. Intel Processors suffers from an input validation error vulnerability that stems from improper UEFI firmware input validation, which could allow a privileged user to elevate privileges via local access...

CVE-2023-34440: Improper Input Validation

Improper input validation in UEFI firmware for some IntelR Processors may allow a privileged user to potentially enable escalation of privilege via local access...

PT-2025-6488

Name of the Vulnerable Software and Affected Versions IntelR processors affected versions not specified Description The issue is related to improper input validation in UEFI firmware for some IntelR processors. This may allow a privileged user to potentially enable escalation of privilege via loc...

PT-2025-6632

Name of the Vulnerable Software and Affected Versions UEFI firmware CseVariableStorageSmm for some IntelR Processors affected versions not specified Description The issue is related to improper input validation in the UEFI firmware, which may allow a privileged user to potentially enable escalati...

PT-2025-6631

Name of the Vulnerable Software and Affected Versions IntelR Processors affected versions not specified Description The issue is related to improper input validation in UEFI firmware for some IntelR Processors. This may allow a privileged user to potentially enable escalation of privilege via loc...

PT-2025-6625

Name of the Vulnerable Software and Affected Versions IntelR processors affected versions not specified Description The issue is related to improper input validation in the XmlCli feature for UEFI firmware, which may allow a privileged user to potentially enable escalation of privilege via local...

PT-2025-6630

Name of the Vulnerable Software and Affected Versions IntelR Processors affected versions not specified Description The issue concerns improper input validation in the UEFI firmware for some IntelR Processors. This may allow a privileged user to potentially enable information disclosure via local...

PT-2025-6637

Name of the Vulnerable Software and Affected Versions IntelR Processors affected versions not specified Description The issue concerns improper initialization in the UEFI firmware OutOfBandXML module, which may allow a privileged user to potentially enable information disclosure via local access...

AMD SMM Callout Vulnerability

AMD ID: AMD-SB-7028 Potential Impact: Arbitrary Code Execution Severity: High Summary AMD SMM callout vulnerability in the AmdPlatformRasSspSmm driver supported on multiple processors. Eclypsium reported an SMM callout vulnerability within the AmdPlatformRasSspSmm UEFI module, which is supported ...

Last-Level Cache Attack

AMD ID: AMD-SB-7032 Potential Impact: N/A Severity: N/A Summary Researchers from Wuhan University have provided AMD with a paper titled “ZenLeak: Practical Last-Level Cache Side-Channel Attacks on AMD Zen Processors” in which they discuss prime and probe attacks targeting the Last-Level Cache LLC...

UBUNTU-CVE-2024-36293

Improper access control in the EDECCSSA user leaf function for some IntelR Processors with IntelR SGX may allow an authenticated user to potentially enable denial of service via local access...

AMD Client Processors February 2025 Security Update

AMD has informed HP of potential vulnerabilities in platform components for some AMD Client Processors, which might allow arbitrary code execution, loss of integrity, loss of confidentiality, or loss of availability. AMD is releasing firmware updates to mitigate these vulnerabilities. AMD has...

PT-2025-6636

Name of the Vulnerable Software and Affected Versions IntelR Processors affected versions not specified Description The issue is related to improper buffer restrictions in the UEFI firmware for some IntelR Processors. This may allow a privileged user to potentially enable escalation of privilege...

PT-2025-6653

Name of the Vulnerable Software and Affected Versions IntelR DSA V1.0 for some IntelR XeonR Processors affected versions not specified Description The sequence of processor instructions leads to unexpected behavior, potentially allowing an authenticated user to enable denial of service via local...

Intel® Data Streaming Accelerator Advisory

Summary: A potential security vulnerability in the Intel® Data Streaming Accelerator Intel® DSA for some Intel® Xeon® Processors may allow denial of service. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2024-37020 Description:...

UEFI Firmware Advisory

Summary: Potential security vulnerabilities in the UEFI firmware for some Intel® Processors may allow escalation of privilege or information disclosure. Intel is releasing UEFI firmware updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2024-31155 Description:...

2024.4 IPU, Intel® Processor Advisory

Summary: A potential security vulnerability in some Intel® Processors may allow denial of service. Intel is releasing microcode updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2024-31068 Description: Improper Finite State Machines FSMs in Hardware Logic for som...

2025.1 IPU - 13th and 14th Generation Intel® Core™ Processor Advisory

Summary: A potential security vulnerability in some 13th and 14th Generation Intel® Core™ Processors may allow denial of service. Intel is releasing microcode and UEFI reference code updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2024-39355 Description: Improp...