CVE-2023-23904

NULL pointer dereference in the UEFI firmware for some IntelR Processors may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2023-41833

A race condition in UEFI firmware for some IntelR processors may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2023-41833

CVE-2023-41833 is a race condition in Intel UEFI firmware for certain Intel processors that may allow a local attacker to escalate privileges. The issue affects UEFI firmware components rather than a consumer-facing application; root cause is synchronization errors when sharing resources in the f...

CVE-2023-23904

CVE-2023-23904 describes a NULL pointer dereference in the UEFI firmware of certain Intel processors that may allow a local privileged user to escalate privileges. The issue is documented across multiple sources (Intel advisory INTEL-SA-01071 and subsequent security posts) and is tied to EFI/UEFI...

CVE-2024-21781

Improper input validation in UEFI firmware for some IntelR Processors may allow a privileged user to enable information disclosure or denial of service via local access...

CVE-2024-21781

Improper input validation in UEFI firmware for some IntelR Processors may allow a privileged user to enable information disclosure or denial of service via local access...

CVE-2024-21781

CVE-2024-21781 involves improper input validation in UEFI firmware for some Intel processors, potentially allowing a local attacker with privileged access to cause information disclosure or denial of service. The vulnerability requires local access and a privileged user, with high-severity impact...

CVE-2024-21829

Improper input validation in UEFI firmware error handler for some IntelR Processors may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2024-21829

Improper input validation in UEFI firmware error handler for some IntelR Processors may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2024-21829

Intel CVE-2024-21829 concerns improper input validation in the UEFI firmware error handler for some Intel processors, which may allow a local, privileged attacker to escalate privileges. The connected intel advisory (INTEL-SA-01071) confirms affected platforms include various Intel processor fami...

CVE-2023-42772

Untrusted pointer dereference in UEFI firmware for some IntelR reference processors may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2023-42772

CVE-2023-42772 affects Intel UEFI firmware on some Intel processors, caused by an untrusted pointer dereference that could permit local privilege escalation. The Intel advisory (Intel SA-01071) notes potential privilege escalation, denial of service, or information disclosure, and recommends upda...

CVE-2023-43626

Improper access control in UEFI firmware for some IntelR Processors may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2023-42772

Untrusted pointer dereference in UEFI firmware for some IntelR reference processors may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2023-43626

CVE-2023-43626: Improper access control in UEFI firmware for Intel processors may allow a local privileged user to escalate privileges. Root cause: access-control weakness in UEFI implementation. Impact: potential privilege escalation; Intel advisory also notes DoS or information disclosure in so...

CVE-2023-43626

Improper access control in UEFI firmware for some IntelR Processors may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2024-21871

Improper input validation in UEFI firmware for some IntelR Processors may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2024-21871

Improper input validation in UEFI firmware for some IntelR Processors may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2024-21871

CVE-2024-21871 covers an improper input validation flaw in UEFI firmware on some Intel® processors that could allow a privileged local attacker to escalate privileges. The issue arises from input validation in the UEFI stack used by Intel’s firmware. Impact is described as privilege escalation wi...

HPESBHF04699 rev.4 - Certain HPE ProLiant DL/ML/XL, Alletra, Edgeline, MicroServer and Synergy Servers Using Certain Intel Processors, INTEL-SA-01071, 2024.3 IPU - UEFI Firmware Advisory, Multiple Vulnerabilities

Potential Security Impact: Local: Denial of Service DoS, Disclosure of Information, Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant DL20 Gen10 Plus server - Prior to v3.4009062024 HPE ProLiant DL110 Gen10 Plus Telco server - Prior to...