CVE-2022-26373

CVE-2022-26373 concerns Intel processors where non-transparent sharing of return-predictor targets between contexts may allow an authorized local user to disclose information. The provided documents describe this issue as a local-information-disclosure risk but do not specify a vendor patch/versi...

CVE-2022-0005

CVE-2022-0005 concerns a potential information disclosure via the JTAG interface on Intel SGX-enabled CPUs. The provided documents confirm a physical-access vulnerability affecting SGX-enabled processors, with related Nessus/ALAS advisories listing CVE-2022-0005 alongside CVEs 2022-21131, 2022-21...

CVE-2022-21180

CVE-2022-21180 is a Linux kernel vulnerability described as improper input validation that could allow an authenticated local user to cause a denial of service. Connected advisories (e.g., SUSE-SU-2022:2111-1 and SUSE-SU-2022:2116-1) reference this CVE among a set of kernel fixes and note that mi...

CVE-2022-21198

CVE-2022-21198 is a TOCTOU race condition in the BIOS firmware of some Intel processors allowing escalation of privilege via local access. Affected are Intel BIOS/IPU firmware implementations referenced in Intel’s INTEL-SA-00688 advisory, with CVSS vectors indicating local attack, low to moderate...

CVE-2023-22329

CVE-2023-22329 is an Intel BIOS firmware vulnerability in some Intel\u00a0Processors caused by improper input validation, potentially allowing an authenticated user to trigger a denial of service via adjacent access. Intel’s advisory INTEL-SA-00924 recommends updating to the latest BIOS provided ...

CVE-2023-25756

The CVE-2023-25756 issue affects Intel BIOS firmware across multiple processors, caused by an out-of-bounds read that may allow an authenticated user to escalate privileges via adjacent access. Documents from Intel (INTEL-SA-00924) confirm the vulnerability in BIOS software and propose updates to...