Priority MEDIUM 43
Sequence of processor instructions leads to unexpected behavior for some Intel(R) Processors may allow an authenticated user to potentially enable escalation of privilege and/or information disclosure and/or denial of se…
CVSS 3.1HIGH 8.8· Local · Low privileges · No interaction · EPSS 0.01283 · Published 2023-11-14 · No fix listed CWE-1281
Priority LOW 36
Insufficient control flow management in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable aescalation of privilege via local access.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00263 · Published 2022-05-12 · No fix listed
Priority LOW 36
Improper input validation in the firmware for some Intel(R) Processors may allow an authenticated user to potentially enable an escalation of privilege via local access.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00301 · Published 2022-02-09 · No fix listed CWE-20
Priority LOW 36
Pointer issues in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable an escalation of privilege via local access.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00301 · Published 2022-02-09 · No fix listed
Priority LOW 36
Out-of-bounds write in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable an escalation of privilege via local access.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00301 · Published 2022-02-09 · No fix listed CWE-787
Priority LOW 35
Out-of-bounds read in the BIOS firmware for some Intel(R) Processors may allow an authenticated user to potentially enable escalation of privilege via adjacent access.
CVSS 3.1HIGH 8.0· Adjacent network · Low privileges · No interaction · EPSS 0.00403 · Published 2023-11-14 · No fix listed CWE-125
Priority LOW 35
Improper input validation in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via adjacent access.
CVSS 3.1HIGH 8.0· Adjacent network · Low privileges · No interaction · EPSS 0.00349 · Published 2023-08-11 · No fix listed CWE-20
Priority LOW 34
Information exposure through microarchitectural state after transient execution in certain vector execution units for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure…
CVSS 3.1MEDIUM 6.5· Local · Low privileges · No interaction · EPSS 0.03047 · Published 2023-08-11 · Partial fix CWE-1342
Priority LOW 34
Improper input validation in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.
CVSS 3.1HIGH 7.5· Local · High privileges · No interaction · EPSS 0.00223 · Published 2023-02-16 · No fix listed CWE-20
Priority LOW 33
Improper initialization in the Intel(R) TXT SINIT ACM for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.
CVSS 3.1HIGH 7.2· Local · High privileges · No interaction · EPSS 0.00212 · Published 2023-02-16 · No fix listed CWE-665
Priority LOW 33
Time-of-check time-of-use race condition in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.
CVSS 3.1HIGH 7.9· Local · High privileges · No interaction · EPSS 0.00153 · Published 2022-11-11 · No fix listed CWE-367
Priority LOW 33
In psi_write of psi.c, there is a possible out of bounds write due to a missing bounds check.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00182 · Published 2020-05-14 · No fix listed CWE-787
Priority LOW 32
Hardware debug modes and processor INIT setting that allow override of locks for some Intel(R) Processors in Intel(R) Boot Guard and Intel(R) TXT may allow an unauthenticated user to potentially enable escalation of priv…
CVSS 3.1MEDIUM 6.8· Physical · No auth · No interaction · EPSS 0.00279 · Published 2022-05-12 · No fix listed
Priority LOW 31
Unintended intermediary in the BIOS authenticated code module for some Intel(R) Processors may allow a privileged user to potentially enable aescalation of privilege via local access.
CVSS 3.1MEDIUM 6.7· Local · High privileges · No interaction · EPSS 0.00262 · Published 2022-05-12 · No fix listed
Priority LOW 31
Improper initialization in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via physical access.
CVSS 3.1MEDIUM 6.6· Physical · Low privileges · No interaction · EPSS 0.00301 · Published 2022-02-09 · No fix listed CWE-665
Priority LOW 31
Improper access control in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via physical access.
CVSS 3.1MEDIUM 6.6· Physical · Low privileges · No interaction · EPSS 0.00319 · Published 2022-02-09 · No fix listed
Priority LOW 31
Out-of-bounds read in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable an escalation of privilege via local access.
CVSS 3.1MEDIUM 6.7· Local · High privileges · No interaction · EPSS 0.00299 · Published 2022-02-09 · No fix listed CWE-125
Priority LOW 29
Improper input validation for some Intel(R) PROSet/Wireless WiFi, Intel vPro(R) CSME WiFi and Killer(TM) WiFi products may allow unauthenticated user to potentially enable denial of service via local access.
CVSS 3.1MEDIUM 6.5· Adjacent network · No auth · No interaction · EPSS 0.00427 · Published 2022-11-11 · No fix listed CWE-1284
Priority LOW 29
Improper initialization in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via physical access.
CVSS 3.1MEDIUM 6.2· Physical · High privileges · No interaction · EPSS 0.00299 · Published 2022-02-09 · No fix listed CWE-665
Priority LOW 25
Non-transparent sharing of return predictor targets between contexts in some Intel(R) Processors may allow an authorized user to potentially enable information disclosure via local access.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00369 · Published 2022-08-18 · Partial fix
Priority LOW 25
Improper isolation of shared resources in some Intel(R) Processors may allow a privileged user to potentially enable information disclosure via local access.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00326 · Published 2022-08-18 · Partial fix
Priority LOW 17
Improper input validation in the BIOS firmware for some Intel(R) Processors may allow an authenticated user to potentially enable denial of service via adjacent access.
CVSS 3.1LOW 3.5· Adjacent network · Low privileges · No interaction · EPSS 0.003 · Published 2023-11-14 · No fix listed CWE-20
Priority LOW 12
Sensitive information accessible by physical probing of JTAG interface for some Intel(R) Processors with SGX may allow an unprivileged user to potentially enable information disclosure via physical access.
CVSS 3.1LOW 2.4· Physical · No auth · No interaction · EPSS 0.00206 · Published 2022-05-12 · Partial fix CWE-319