Priority MEDIUM 43
Sequence of processor instructions leads to unexpected behavior for some Intel(R) Processors may allow an authenticated user to potentially enable escalation of privilege and/or information disclosure and/or denial of se…
CVSS 3.1HIGH 8.8· Local · Low privileges · No interaction · EPSS 0.01283 · Published 2023-11-14 · No fix listed CWE-1281
Priority LOW 36
Improper access control in the BIOS authenticated code module for some Intel(R) Processors may allow a privileged user to potentially enable aescalation of privilege via local access.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00263 · Published 2022-05-12 · No fix listed
Priority LOW 36
Out-of-bounds write in the BIOS firmware for some Intel(R) Processors may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00263 · Published 2022-08-18 · No fix listed CWE-787
Priority LOW 36
Improper input validation in the BIOS authenticated code module for some Intel(R) Processors may allow a privileged user to potentially enable aescalation of privilege via local access.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.0027 · Published 2022-05-12 · No fix listed CWE-20
Priority LOW 35
Improper access control in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable an escalation of privilege via local access.
CVSS 3.1HIGH 8.2· Local · High privileges · No interaction · EPSS 0.00213 · Published 2023-02-16 · No fix listed
Priority LOW 34
Information exposure through microarchitectural state after transient execution in certain vector execution units for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure…
CVSS 3.1MEDIUM 6.5· Local · Low privileges · No interaction · EPSS 0.03047 · Published 2023-08-11 · Partial fix CWE-1342
Priority LOW 34
Improper initialization in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.
CVSS 3.1HIGH 7.5· Local · High privileges · No interaction · EPSS 0.00211 · Published 2023-02-16 · No fix listed CWE-665
Priority LOW 34
Use after free in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.
CVSS 3.1HIGH 7.5· Local · High privileges · No interaction · EPSS 0.00211 · Published 2023-02-16 · No fix listed CWE-416
Priority LOW 34
Insufficient granularity of access control in out-of-band management in some Intel(R) Atom and Intel Xeon Scalable Processors may allow a privileged user to potentially enable escalation of privilege via adjacent network…
CVSS 3.1HIGH 7.5· Adjacent network · High privileges · No interaction · EPSS 0.00539 · Published 2023-02-16 · Partial fix
Priority LOW 33
Incorrect default permissions in some memory controller configurations for some Intel(R) Xeon(R) Processors when using Intel(R) Software Guard Extensions which may allow a privileged user to potentially enable escalation…
CVSS 3.1HIGH 7.2· Local · High privileges · No interaction · EPSS 0.00213 · Published 2023-02-16 · Partial fix CWE-276
Priority LOW 31
Unauthorized error injection in Intel(R) SGX or Intel(R) TDX for some Intel(R) Xeon(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.
CVSS 3.1HIGH 7.2· Local · High privileges · User interaction · EPSS 0.00275 · Published 2023-08-11 · Partial fix CWE-1334
Priority LOW 31
Out-of-bounds write in the BIOS authenticated code module for some Intel(R) Processors may allow a privileged user to potentially enable aescalation of privilege via local access.
CVSS 3.1MEDIUM 6.7· Local · High privileges · No interaction · EPSS 0.00262 · Published 2022-05-12 · No fix listed CWE-787
Priority LOW 30
Improper input validation in the Intel(R) SGX SDK applications compiled for SGX2 enabled processors may allow a privileged user to potentially escalation of privilege via local access.
CVSS 3.1MEDIUM 6.7· Local · High privileges · No interaction · EPSS 0.0033 · Published 2021-11-17 · No fix listed CWE-20
Priority LOW 28
Hardware logic contains race conditions for some 3rd Gen Intel(R) Xeon(R) Scalable Processors within Ring 3: unprivileged software may allow a denial of service.
CVSS 4.0MEDIUM 6.8· Local · Low privileges · No interaction · EPSS 0.00071 · Published 2026-08-11 · No fix listed CWE-1298
Priority LOW 27
Incorrect calculation in microcode keying mechanism for some 3rd Generation Intel(R) Xeon(R) Scalable Processors may allow a privileged user to potentially enable information disclosure via local access.
CVSS 3.1MEDIUM 6.1· Local · High privileges · No interaction · EPSS 0.0022 · Published 2023-02-16 · No fix listed CWE-682
Priority LOW 26
Improper access control in some 3rd Generation Intel(R) Xeon(R) Scalable processors may allow a privileged user to potentially enable information disclosure via local access.
CVSS 3.1MEDIUM 6.0· Local · High privileges · No interaction · EPSS 0.00251 · Published 2023-08-11 · No fix listed CWE-284
Priority LOW 26
Improper isolation of shared resources in some Intel(R) Processors when using Intel(R) Software Guard Extensions may allow a privileged user to potentially enable information disclosure via local access.
CVSS 3.1MEDIUM 6.0· Local · High privileges · No interaction · EPSS 0.00249 · Published 2023-02-16 · No fix listed CWE-922
Priority LOW 25
Processor optimization removal or modification of security-critical code for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00361 · Published 2022-05-12 · Partial fix
Priority LOW 20
Insufficient control flow management in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable denial of service via local access.
CVSS 3.1MEDIUM 4.4· Local · High privileges · No interaction · EPSS 0.00167 · Published 2023-08-11 · No fix listed CWE-691