2456 matches found
PT-2025-6488
Name of the Vulnerable Software and Affected Versions IntelR processors affected versions not specified Description The issue is related to improper input validation in UEFI firmware for some IntelR processors. This may allow a privileged user to potentially enable escalation of privilege via loc...
PT-2025-6659
Name of the Vulnerable Software and Affected Versions IntelR processors affected versions not specified Description The issue is related to insufficient granularity of access control in UEFI firmware, which may allow an authenticated user to potentially enable denial of service via local access...
PT-2025-6637
Name of the Vulnerable Software and Affected Versions IntelR Processors affected versions not specified Description The issue concerns improper initialization in the UEFI firmware OutOfBandXML module, which may allow a privileged user to potentially enable information disclosure via local access...
HPESBHF04790 rev.2 - Certain HPE ProLiant DL/ML/XL, Alletra, Edgeline and Synergy Servers Using Certain Intel Processor BIOS, INTEL-SA-01139, 2025.1 IPU - UEFI Firmware Advisory, Multiple Vulnerabilities
Potential Security Impact: Local: Denial of Service DoS, Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Alletra 4110 - Prior to v2.4401-17-2025 HPE Alletra 4120 - Prior to v2.4401-17-2025 HPE Alletra 4140 - Prior to v2.4401-17-2025 HPE ProLiant DL110...
PT-2025-6630
Name of the Vulnerable Software and Affected Versions IntelR Processors affected versions not specified Description The issue concerns improper input validation in the UEFI firmware for some IntelR Processors. This may allow a privileged user to potentially enable information disclosure via local...
PT-2025-6632
Name of the Vulnerable Software and Affected Versions UEFI firmware CseVariableStorageSmm for some IntelR Processors affected versions not specified Description The issue is related to improper input validation in the UEFI firmware, which may allow a privileged user to potentially enable escalati...
2025.1 IPU - 13th and 14th Generation Intel® Core™ Processor Advisory
Summary: A potential security vulnerability in some 13th and 14th Generation Intel® Core™ Processors may allow denial of service. Intel is releasing microcode and UEFI reference code updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2024-39355 Description: Improp...
UEFI Firmware Advisory
Summary: Potential security vulnerabilities in the UEFI firmware for some Intel® Processors may allow escalation of privilege or information disclosure. Intel is releasing UEFI firmware updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2024-31155 Description:...
2025.1 IPU - UEFI Firmware Advisory
Summary: Potential security vulnerabilities in the UEFI firmware for some Intel® Processors may allow escalation of privilege, denial of service, or information disclosure. Intel is releasing UEFI firmware and CPU microcode updates to mitigate these potential vulnerabilities. Vulnerability Detail...
CVE-2022-36374
Improper access control in some IntelR Aptio V UEFI Firmware Integrator Tools before version iDmi Windows 5.27.03.0003 may allow a privileged user to potentially enable escalation of privilege via local access...
CVE-2022-36396
Improper access control in some IntelR Aptio V UEFI Firmware Integrator Tools before version iDmiEdit-Linux-5.27.06.0017 may allow a privileged user to potentially enable escalation of privilege via local access...
CVE-2022-4020
Vulnerability in the HQSwSmiDxe DXE driver on some consumer Acer Notebook devices may allow an attacker with elevated privileges to modify UEFI Secure Boot settings by modifying an NVRAM variable...
CVE-2024-21871
Improper input validation in UEFI firmware for some IntelR Processors may allow a privileged user to potentially enable escalation of privilege via local access...
CVE-2024-21781
Improper input validation in UEFI firmware for some IntelR Processors may allow a privileged user to enable information disclosure or denial of service via local access...
CVE-2024-21829
Improper input validation in UEFI firmware error handler for some IntelR Processors may allow a privileged user to potentially enable escalation of privilege via local access...
CVE-2024-23487
Improper input validation in UserAuthenticationSmm driver in UEFI firmware for some IntelR Server D50DNP Family products may allow a privileged user to enable escalation of privilege via local access...
CVE-2024-1598
Potential buffer overflow in unsafe UEFI variable handling in Phoenix SecureCore™ for Intel Gemini Lake.This issue affects: SecureCore™ for Intel Gemini Lake: from 4.1.0.1 before 4.1.0.567...
CVE-2024-24981
Improper input validation in PfrSmiUpdateFw driver in UEFI firmware for some IntelR Server M50FCP Family products may allow a privileged user to enable escalation of privilege via local access...