CVE-2020-0526

The CVE-2020-0526 and CVE-2020-0530 issues are documented in Intel’s NUC Firmware Advisory (intel-sa-00343). They affect Intel NUC firmware and describe two flaws: CVE-2020-0526 (improper input validation) and CVE-2020-0530 (improper buffer restrictions). Both allow a local, authenticated user to...

CVE-2020-0530

CVE-2020-0530 concerns Intel NUC firmware. The advisory and CVE entry describe an improper buffer restriction in firmware that may allow an authenticated, local attacker to escalate privileges. The Intel NUC firmware advisory (intel-sa-00343) provides a list of affected NUC models and directs use...

CVE-2021-0109

The CVE-2021-0109 issue affects Intel’s SOC Driver Package for STK1A32SC (versions before 604). The root cause is insecure inherited permissions in the driver package, which may allow an authenticated local user to escalate privileges. Intel’s advisory (Intel SA-00471) confirms the vulnerability,...