CVE-2026-20898

CVE-2026-20898 concerns improper access control in the firmware of the Alias Checking Trusted Module for some Intel Xeon processors, enabling local privilege escalation. The issue arises from startup code and SMM behavior that, when combined with a privileged attacker and high-complexity conditio...

CVE-2026-20716

CVE-2026-20716 involves improper access control affecting some Intel processors in Ring 3 (user applications). The issue could allow an escalation of privilege via a local attack by a simple hardware adversary who has an authenticated user and can perform a high-complexity attack with no user int...