CVE-2019-0185

MEDIUM

Intel Core i7-6970HQ Firmware - Information Disclosure via Protected Memory Subsystem

Title source: llm
STIX 2.1

Description

Insufficient access control in protected memory subsystem for SMM for 6th, 7th, 8th and 9th Generation Intel(R) Core(TM) Processor families; Intel(R) Xeon(R) Processor E3-1500 v5 and v6 families; Intel(R) Xeon(R) E-2100 and E-2200 Processor families with Intel(R) Processor Graphics may allow a privileged user to potentially enable information disclosure via local access.

Scores

CVSS v3 5.5
EPSS 0.0014
EPSS Percentile 33.5%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Details

Status published
Products (50)
intel/core_i5-7200u_firmware
intel/core_i5-7260u_firmware
intel/core_i5-7267u_firmware
intel/core_i5-7287u_firmware
intel/core_i5-7300hq_firmware
intel/core_i5-7300u_firmware
intel/core_i5-7360u_firmware
intel/core_i5-7400_firmware
intel/core_i5-7400t_firmware
intel/core_i5-7440eq_firmware
... and 40 more
Published Nov 14, 2019
Tracked Since Feb 18, 2026