CVE-2025-22889

Improper handling of overlap between protected memory ranges for some IntelR XeonR 6 processor with IntelR TDX may allow a privileged user to potentially enable escalation of privilege via local access...

DEBIAN-CVE-2025-22889

Improper handling of overlap between protected memory ranges for some IntelR XeonR 6 processor with IntelR TDX may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2025-21096

Improper buffer restrictions in the firmware for some IntelR TDX may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2024-33607

Out-of-bounds read in some IntelR TDX module software before version TDX1.5.07.00.774 may allow an authenticated user to potentially enable information disclosure via local access...

CVE-2024-33607

Out-of-bounds read in some IntelR TDX module software before version TDX1.5.07.00.774 may allow an authenticated user to potentially enable information disclosure via local access...

UBUNTU-CVE-2025-24305

Insufficient control flow management in the Alias Checking Trusted Module ACTM firmware for some IntelR XeonR processors may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2024-33607

CVE-2024-33607 describes an out-of-bounds read in some Intel® TDX module software prior to version 1.5.07.00.774, which may allow an authenticated user to disclose information via local access. Affected software is Intel® TDX module software before 1.5.07.00.774. The vulnerability has local attac...

CVE-2025-32086

Improperly implemented security check for standard in the DDRIO configuration for some IntelR XeonR 6 Processors when using IntelR SGX or IntelR TDX may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2025-32086

Improperly implemented security check for standard in the DDRIO configuration for some IntelR XeonR 6 Processors when using IntelR SGX or IntelR TDX may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2025-32086

Improperly implemented security check for standard in the DDRIO configuration for some IntelR XeonR 6 Processors when using IntelR SGX or IntelR TDX may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2025-26403

Out-of-bounds write in the memory subsystem for some IntelR XeonR 6 processors when using IntelR SGX or IntelR TDX may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2025-24305

CVE-2025-24305 concerns insufficient control flow management in the Alias Checking Trusted Module (ACTM) firmware on some Intel Xeon processors, potentially allowing privilege escalation via local access. Connected sources consistently reference Intel microcode updates as the remediation path. De...

CVE-2025-24305

Insufficient control flow management in the Alias Checking Trusted Module ACTM firmware for some IntelR XeonR processors may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2025-22889

CVE-2025-22889 affects Intel Xeon 6 processors with Intel TDX. The root cause is improper handling of overlap between protected memory ranges, which may allow a privileged user to escalate privileges via local access. Publicly documented mitigations involve microcode updates (e.g., intel-microcod...

CVE-2025-22853

Intel TDX firmware contains an improper synchronization issue that can allow a privileged user with local access to escalate privileges (CVE-2025-22853). The issue is documented in the Intel advisory INTEL-SA-01312 and is associated with Intel(R) TDX firmware and related processors. According to ...

CVE-2025-21096

CVE-2025-21096 involves the Intel® TDX firmware and is caused by improper buffer restrictions in the firmware. This vulnerability could allow a privileged, local attacker to escalate privileges. Intel’s advisory (Intel SA-01312) references CVE-2025-21096 among related TDX issues and recommends up...

CVE-2025-20613

Predictable Seed in Pseudo-Random Number Generator PRNG in the firmware for some IntelR TDX may allow an authenticated user to potentially enable information disclosure via local access...

CVE-2025-42934

SAP S/4HANA Supplier invoice is vulnerable to CRLF Injection. An attacker with user-level privileges can bypass the allowlist and insert untrusted sites into the 'Trusted Sites' configuration by injecting line feed LF characters into application inputs. This vulnerability has a low impact on the...

CVE-2025-42934 CRLF Injection vulnerability in SAP S/4HANA (Supplier invoice)

SAP S/4HANA Supplier invoice is vulnerable to CRLF Injection. An attacker with user-level privileges can bypass the allowlist and insert untrusted sites into the 'Trusted Sites' configuration by injecting line feed LF characters into application inputs. This vulnerability has a low impact on the...

CVE-2025-42934 CRLF Injection vulnerability in SAP S/4HANA (Supplier invoice)

SAP S/4HANA Supplier invoice is vulnerable to CRLF Injection. An attacker with user-level privileges can bypass the allowlist and insert untrusted sites into the 'Trusted Sites' configuration by injecting line feed LF characters into application inputs. This vulnerability has a low impact on the...