CVE-2022-41804

CVE-2022-41804 describes unauthorized error injection in Intel SGX or Intel TDX on some Intel Xeon CPUs that could enable local privilege escalation. Public sources (Intel advisory INTEL-SA-00837 and Debian/Cloud Foundry advisories) confirm the vulnerability and provide mitigations. Affected prod...

CVE-2026-20898

CVE-2026-20898 concerns improper access control in the firmware of the Alias Checking Trusted Module for some Intel Xeon processors, enabling local privilege escalation. The issue arises from startup code and SMM behavior that, when combined with a privileged attacker and high-complexity conditio...

CVE-2026-20901

CVE-2026-20901 concerns firmware input validation issues in some Intel Xeon processors. The root cause is improper input validation in startup code and SMM pathways, creating a pathway for a local attacker with privileged access and a high-complexity attack to alter data. The exploit requires loc...