CVE & Exploit Intelligence Database

CVE-2023-25756 4.6 MEDIUM EPSS 0.00

Out-of-bounds read in the BIOS firmware for some Intel(R) Processors may allow an authenticated user to potentially enable escalation of privilege via adjacent access.

CWE-125 Nov 14, 2023

CVE-2023-22329 2.6 LOW EPSS 0.00

Improper input validation in the BIOS firmware for some Intel(R) Processors may allow an authenticated user to potentially enable denial of service via adjacent access.

CWE-20 Nov 14, 2023

CVE-2022-44611 6.9 MEDIUM EPSS 0.00

Improper input validation in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via adjacent access.

CWE-20 Aug 11, 2023

CVE-2022-43505 4.1 MEDIUM EPSS 0.00

Insufficient control flow management in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable denial of service via local access.

CWE-691 Aug 11, 2023

CVE-2022-40982 6.5 MEDIUM EPSS 0.01

Information exposure through microarchitectural state after transient execution in certain vector execution units for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.

CWE-1342 Aug 11, 2023

CVE-2022-38087 4.1 MEDIUM EPSS 0.00

Exposure of resource to wrong sphere in BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable information disclosure via local access.

CWE-668 May 10, 2023

CVE-2022-33894 7.5 HIGH EPSS 0.00

Improper input validation in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.

CWE-20 May 10, 2023

CVE-2022-26047 4.3 MEDIUM EPSS 0.00

Improper input validation for some Intel(R) PROSet/Wireless WiFi, Intel vPro(R) CSME WiFi and Killer(TM) WiFi products may allow unauthenticated user to potentially enable denial of service via local access.

CWE-1284 Nov 11, 2022

CVE-2022-29901 5.6 MEDIUM EPSS 0.00

Intel microprocessor generations 6 to 8 are affected by a new Spectre variant that is able to bypass their retpoline mitigation in the kernel to leak arbitrary data. An attacker with unprivileged user access can hijack return instructions to achieve arbitrary speculative code execution under certain microarchitecture-dependent conditions.

CWE-200 Jul 12, 2022

CVE-2022-21180 5.5 MEDIUM EPSS 0.00

Improper input validation for some Intel(R) Processors may allow an authenticated user to potentially cause a denial of service via local access.

CWE-20 Jun 15, 2022

CVE-2022-21151 5.5 MEDIUM EPSS 0.00

Processor optimization removal or modification of security-critical code for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.

May 12, 2022

CVE-2022-0005 2.4 LOW EPSS 0.00

Sensitive information accessible by physical probing of JTAG interface for some Intel(R) Processors with SGX may allow an unprivileged user to potentially enable information disclosure via physical access.

CWE-319 May 12, 2022

CVE-2022-0004 6.8 MEDIUM EPSS 0.00

Hardware debug modes and processor INIT setting that allow override of locks for some Intel(R) Processors in Intel(R) Boot Guard and Intel(R) TXT may allow an unauthenticated user to potentially enable escalation of privilege via physical access.

May 12, 2022

CVE-2021-33124 6.7 MEDIUM EPSS 0.00

Out-of-bounds write in the BIOS authenticated code module for some Intel(R) Processors may allow a privileged user to potentially enable aescalation of privilege via local access.

CWE-787 May 12, 2022

CVE-2021-33123 7.8 HIGH EPSS 0.00

Improper access control in the BIOS authenticated code module for some Intel(R) Processors may allow a privileged user to potentially enable aescalation of privilege via local access.

May 12, 2022

CVE-2021-0156 7.8 HIGH EPSS 0.00

Improper input validation in the firmware for some Intel(R) Processors may allow an authenticated user to potentially enable an escalation of privilege via local access.

CWE-20 Feb 09, 2022

CVE-2021-0125 6.6 MEDIUM EPSS 0.00

Improper initialization in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via physical access.

CWE-665 Feb 09, 2022

CVE-2021-0124 6.6 MEDIUM EPSS 0.00

Improper access control in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via physical access.

Feb 09, 2022

CVE-2021-0119 6.2 MEDIUM EPSS 0.00

Improper initialization in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via physical access.

CWE-665 Feb 09, 2022

CVE-2021-0118 6.7 MEDIUM EPSS 0.00

Out-of-bounds read in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable an escalation of privilege via local access.

CWE-125 Feb 09, 2022