CVE-2022-40982

CVE-2022-40982 is an information-leak via microarchitectural state after transient execution in certain Intel vector execution units. The connected docs consistently describe local information disclosure by an authenticated user on affected Intel processors, with mitigations centered on firmware/...

CVE-2020-8694

CVE-2020-8694 affects the Linux kernel powercap/RAPL subsystem. The issue allows a local, unprivileged attacker to read CPU energy meters by default, enabling information disclosure between processes or from kernel to user space. Public documents describe the root cause as insufficient access con...

CVE-2020-0548

CVE-2020-0548 is an Intel microcode information-disclosure vulnerability caused by cleanup errors in certain processors, allowing a local attacker to potentially read sensitive data from registers or buffers. Public documentation across Debian, Arch, Amazon Linux, CentOS/RHEL, and Cloud Foundry a...

CVE-2020-0549

CVE-2020-0549 relates to cleanup errors in Intel CPU data cache eviction handling, enabling potential information disclosure from local access. Publicly documented fixes target Intel microcode updates (e.g., SRBDS/L1D eviction sampling issues) and are distributed via microcode_ctl packages and ve...

CVE-2020-8695

CVE-2020-8695 is reported as an observable discrepancy in the Intel Running Average Power Limit (RAPL) interface that may allow a local privileged user to disclose information. Connected sources confirm this affects Intel processors and is addressed via microcode updates. Remediation guidance acr...

CVE-2022-21180

CVE-2022-21180 is a Linux kernel vulnerability described as improper input validation that could allow an authenticated local user to cause a denial of service. Connected advisories (e.g., SUSE-SU-2022:2111-1 and SUSE-SU-2022:2116-1) reference this CVE among a set of kernel fixes and note that mi...

CVE-2021-0116

CVE-2021-0116 is an Intel firmware vulnerability described as an out-of-bounds write in the affected Intel processors’ firmware that could allow a local, privileged escalation. Connected documents confirm the CVE details and provide context across multiple vendor advisories (IBM QRadar, F5 adviso...

CVE-2021-0156

CVE-2021-0156 involves Intel processor firmware and is caused by improper input validation, enabling a local authenticated user to potentially escalate privileges. Public sources in the provided documents indicate vulnerable firmware on specific platforms (e.g., VELOS CX410 and VELOS BX110 blades...

CVE-2021-0124

CVE-2021-0124 describes improper access control in Intel processor firmware that could let a privileged user escalate privileges with physical/local access. The vulnerability is documented across multiple sources (NVD entry; IBM QRadar advisories; F5 advisory) and is associated with privilege esc...

CVE-2021-0119

CVE-2021-0119 stems from improper initialization in Intel processor firmware that can allow a local attacker with physical access to escalate privileges. Connected advisories confirm affected platforms (e.g., IBM QRadar appliances M5/M6, certain Oracle/Red Hat/HP/F5-guided deployments) and descri...

CVE-2021-0117

CVE-2021-0117 describes pointer issues in Intel processor firmware that may allow a local attacker to escalate privileges. The vulnerability is rooted in firmware handling, with impacts described as local privilege escalation and, per some sources, possible denial of service or information disclo...

CVE-2021-33124

CVE-2021-33124 refers to an out-of-bounds write in the BIOS authenticated code module for some Intel processors that may allow a privileged local user to escalate privileges. Public advisories (Intel SA-00601) describe this class of BIOS/firmware flaws and recommend applying the latest Intel BIOS...

CVE-2021-0154

CVE-2021-0154 is an Intel BIOS/BIOS-authenticated code module vulnerability caused by improper input validation in the BIOS firmware for certain Intel processors. It allows a locally authenticated attacker to escalate privileges or access restricted information on affected systems. The issue impa...

CVE-2022-43505

The CVE-2022-43505 issue affects Intel BIOS firmware due to Insufficient control flow management in the BIOS, which may allow a privileged local user to cause a denial of service. Intel’s INTEL-SA-00813 advisory and associated feeds describe vulnerable BIOS implementations and list affected Intel...

CVE-2021-0125

CVE-2021-0125 is a confirmed Intel processor firmware vulnerability caused by improper initialization that can enable privilege escalation with physical/local access. Connected sources name affected platforms and vendor advisories; e.g., IBM QRadar M6/M5 firmware lines and IBM Cloud Pak System up...

CVE-2021-0118

CVE-2021-0118 involves an out-of-bounds read in Intel processor firmware that could enable local privilege escalation. Public documents confirm affected surface as Intel processor firmware with local access as the attack vector. IBM and F5 advisories reference this CVE among a family of firmware ...

CVE-2021-33123

CVE-2021-33123 : Improper access control in the BIOS authenticated code module for certain Intel processors may allow a locally authenticated user to escalate privileges. The issue is discussed in the Intel IPU BIOS advisory (INTEL-SA-00601) with CVSS v3.1 base scores reported as high (up to 8.2)...

CVE-2022-38083

The CVE-2022-38083 issue is an Intel BIOS firmware vulnerability caused by improper initialization in BIOS, affecting some Intel processors. The underlying flaw can enable an information disclosure via local access by a privileged user. Affected component: BIOS firmware; attack was evaluated with...

CVE-2022-26006

CVE-2022-26006 describes an vulnerability in the BIOS firmware for some Intel processors caused by improper input validation, which could allow a privileged user to escalate privileges via local access. The issue is documented by Intel under INTEL-SA-00688 and is reflected in Nessus/F5 advisories...

CVE-2021-0155

CVE-2021-0155 is an Intel BIOS/BIOS authenticated code vulnerability: an unchecked return value in BIOS firmware may allow a local privileged user to disclose information. Intel/INTEL-SA-00601 documents this as a potential information-disclosure/privil ege-escalation issue affecting multiple Inte...