CVE-2018-12207

CVE-2018-12207 describes an issue where improper invalidation of page-table updates by a privileged guest can cause a Denial of Service on the host on Intel processors. The vulnerability stems from how the guest VM handles translations in the MMU/TLB when paging structures change, potentially exp...

CVE-2022-21233

CVE-2022-21233 affects Intel processors via improper isolation of shared resources, leading to potential information disclosure with local access. The vulnerability is discussed across multiple advisories (Intel microcode, Debian, Amazon Linux, Astra Linux, Cloud Foundry) and is tied to the Intel...

CVE-2022-26373

CVE-2022-26373 concerns Intel processors where non-transparent sharing of return-predictor targets between contexts may allow an authorized local user to disclose information. The provided documents describe this issue as a local-information-disclosure risk but do not specify a vendor patch/versi...

CVE-2022-0004

CVE-2022-0004 concerns Intel® Boot Guard and Intel® TXT. The issue arises from hardware debug modes and a processor INIT setting that allow an unauthenticated user to potentially bypass protections and escalate privileges via physical access. Intel lists affected generations (10th–12th Gen Core, ...

CVE-2019-0126

CVE-2019-0126 describes insufficient access control in the silicon reference firmware for Intel Xeon Scalable and Xeon D Family CPUs, potentially allowing a local privileged user to escalate privileges or cause DoS. Public documents confirm the affected platform and impact but do not provide expl...

CVE-2019-0119

CVE-2019-0119 is a buffer overflow in system firmware affecting Intel Xeon D Family, Intel Xeon Scalable Processors, Intel Server Board/System, and Intel Compute Module. The underlying issue is in the firmware that could allow a privileged local user to escalate privileges and/or cause a denial o...

CVE-2019-11136

CVE-2019-11136 affects Intel firmware for Xeon® Scalable Processors (2nd Gen Xeon Scalable and Xeon D Family). Root cause: insufficient access control in system firmware, enabling a locally authenticated attacker to escalate privileges, potentially cause denial of service or information disclosur...

CVE-2019-11137

CVE-2019-11137 affects Intel firmware in multiple Xeon families (Scalable, D, E5 v4, E7 v4, Atom C Series). Root cause: insufficient input validation in system firmware, enabling a local privileged attacker to escalate privileges, cause denial of service, and disclose information. Affected compon...