CVE-2026-20898

CVE-2026-20898 concerns improper access control in the firmware of the Alias Checking Trusted Module for some Intel Xeon processors, enabling local privilege escalation. The issue arises from startup code and SMM behavior that, when combined with a privileged attacker and high-complexity conditio...

CVE-2025-31936

CVE-2025-31936 involves improper handling of overlap between protected memory ranges for some Intel Xeon 6 processors when using Intel TDX within SMM. The vulnerability could allow local escalation of privilege when a privileged SMM-adversary with high-complexity attack requirements, and without ...

CVE-2026-20716

CVE-2026-20716 involves improper access control affecting some Intel processors in Ring 3 (user applications). The issue could allow an escalation of privilege via a local attack by a simple hardware adversary who has an authenticated user and can perform a high-complexity attack with no user int...