CVE-2022-40982

CVE-2022-40982 is an information-leak via microarchitectural state after transient execution in certain Intel vector execution units. The connected docs consistently describe local information disclosure by an authenticated user on affected Intel processors, with mitigations centered on firmware/...

CVE-2018-12207

CVE-2018-12207 describes an issue where improper invalidation of page-table updates by a privileged guest can cause a Denial of Service on the host on Intel processors. The vulnerability stems from how the guest VM handles translations in the MMU/TLB when paging structures change, potentially exp...

CVE-2022-0004

CVE-2022-0004 concerns Intel® Boot Guard and Intel® TXT. The issue arises from hardware debug modes and a processor INIT setting that allow an unauthenticated user to potentially bypass protections and escalate privileges via physical access. Intel lists affected generations (10th–12th Gen Core, ...

CVE-2022-0005

CVE-2022-0005 concerns a potential information disclosure via the JTAG interface on Intel SGX-enabled CPUs. The provided documents confirm a physical-access vulnerability affecting SGX-enabled processors, with related Nessus/ALAS advisories listing CVE-2022-0005 alongside CVEs 2022-21131, 2022-21...

CVE-2022-21198

CVE-2022-21198 is a TOCTOU race condition in the BIOS firmware of some Intel processors allowing escalation of privilege via local access. Affected are Intel BIOS/IPU firmware implementations referenced in Intel’s INTEL-SA-00688 advisory, with CVSS vectors indicating local attack, low to moderate...

CVE-2022-43505

The CVE-2022-43505 issue affects Intel BIOS firmware due to Insufficient control flow management in the BIOS, which may allow a privileged local user to cause a denial of service. Intel’s INTEL-SA-00813 advisory and associated feeds describe vulnerable BIOS implementations and list affected Intel...

CVE-2023-22329

CVE-2023-22329 is an Intel BIOS firmware vulnerability in some Intel\u00a0Processors caused by improper input validation, potentially allowing an authenticated user to trigger a denial of service via adjacent access. Intel’s advisory INTEL-SA-00924 recommends updating to the latest BIOS provided ...

CVE-2022-30704

The CVE-2022-30704 issue relates to improper initialization in the Intel TXT SINIT ACM for certain Intel processors. The underlying effect is a potential privilege escalation via local access by a privileged user. Documents specify the affected component as the Intel TXT SINIT ACM within BIOS/fir...

CVE-2023-25756

The CVE-2023-25756 issue affects Intel BIOS firmware across multiple processors, caused by an out-of-bounds read that may allow an authenticated user to escalate privileges via adjacent access. Documents from Intel (INTEL-SA-00924) confirm the vulnerability in BIOS software and propose updates to...