CVE-2024-21829

Intel CVE-2024-21829 concerns improper input validation in the UEFI firmware error handler for some Intel processors, which may allow a local, privileged attacker to escalate privileges. The connected intel advisory (INTEL-SA-01071) confirms affected platforms include various Intel processor fami...

CVE-2023-42772

Untrusted pointer dereference in UEFI firmware for some IntelR reference processors may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2023-42772

CVE-2023-42772 affects Intel UEFI firmware on some Intel processors, caused by an untrusted pointer dereference that could permit local privilege escalation. The Intel advisory (Intel SA-01071) notes potential privilege escalation, denial of service, or information disclosure, and recommends upda...

CVE-2023-43626

Improper access control in UEFI firmware for some IntelR Processors may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2023-42772

Untrusted pointer dereference in UEFI firmware for some IntelR reference processors may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2023-43626

CVE-2023-43626: Improper access control in UEFI firmware for Intel processors may allow a local privileged user to escalate privileges. Root cause: access-control weakness in UEFI implementation. Impact: potential privilege escalation; Intel advisory also notes DoS or information disclosure in so...

CVE-2023-43626

Improper access control in UEFI firmware for some IntelR Processors may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2024-21871

Improper input validation in UEFI firmware for some IntelR Processors may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2024-21871

Improper input validation in UEFI firmware for some IntelR Processors may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2024-21871

CVE-2024-21871 covers an improper input validation flaw in UEFI firmware on some Intel® processors that could allow a privileged local attacker to escalate privileges. The issue arises from input validation in the UEFI stack used by Intel’s firmware. Impact is described as privilege escalation wi...

HPESBHF04699 rev.4 - Certain HPE ProLiant DL/ML/XL, Alletra, Edgeline, MicroServer and Synergy Servers Using Certain Intel Processors, INTEL-SA-01071, 2024.3 IPU - UEFI Firmware Advisory, Multiple Vulnerabilities

Potential Security Impact: Local: Denial of Service DoS, Disclosure of Information, Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant DL20 Gen10 Plus server - Prior to v3.4009062024 HPE ProLiant DL110 Gen10 Plus Telco server - Prior to...

CVE-2024-7756

A potential vulnerability was reported in the ThinkPad L390 Yoga and 10w Notebook that could allow a local attacker to escalate privileges by accessing an embedded UEFI shell...

CVE-2024-45105

An internal product security audit discovered a UEFI SMM System Management Mode callout vulnerability in some ThinkSystem servers that could allow a local attacker with elevated privileges to execute arbitrary code...

CVE-2024-45105

An internal product security audit discovered a UEFI SMM System Management Mode callout vulnerability in some ThinkSystem servers that could allow a local attacker with elevated privileges to execute arbitrary code...

CVE-2024-45105

An internal product security audit discovered a UEFI SMM System Management Mode callout vulnerability in some ThinkSystem servers that could allow a local attacker with elevated privileges to execute arbitrary code...

CVE-2024-7756

A potential vulnerability was reported in the ThinkPad L390 Yoga and 10w Notebook that could allow a local attacker to escalate privileges by accessing an embedded UEFI shell...

CVE-2024-7756

A potential vulnerability was reported in the ThinkPad L390 Yoga and 10w Notebook that could allow a local attacker to escalate privileges by accessing an embedded UEFI shell...

CVE-2024-7756

The CVE-2024-7756 issue affects ThinkPad L390 Yoga and 10w Notebook. A local, physically present attacker could escalate privileges by accessing an embedded UEFI shell, with attack requiring no user interaction. Documented impact is High for confidentiality, integrity, and availability; CVSS v3.1...

The vulnerability of open-source development environments for UEFI EDK2, related to configuration errors, allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of open-source development environments for UEFI EDK2 is related to configuration errors. Exploiting this vulnerability can allow attackers to access confidential data, compromise its integrity, and cause service failures...

PT-2024-7328 · Intel · Intel Processors

Name of the Vulnerable Software and Affected Versions: IntelR Processors affected versions not specified Description: The issue is related to improper access control in UEFI firmware for some IntelR Processors, which may allow a privileged user to potentially enable escalation of privilege via...