UEFI firmware for some Intel(R) Processors

7 vulnérabilités publiées citent ce produit.

Tel que les CNA l’écrivent dans leurs fiches CVE (éditeur et produit) ; les versions sont les leurs.

CVEVersions vulnérablesTitreSévéritéPubliéeEPSSExploitation
CVE-2023-25546See referencesOut-of-bounds read in UEFI firmware for some Intel(R) Processors may allow a privileged user to potentially enable denial of service via locLOW 1.80.1 %
CVE-2023-22351See referencesOut-of-bounds write in UEFI firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege MEDIUM 6.90.1 %
CVE-2023-41833See referencesA race condition in UEFI firmware for some Intel(R) processors may allow a privileged user to potentially enable escalation of privilege viaHIGH 8.70.1 %
CVE-2023-23904See referencesNULL pointer dereference in the UEFI firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of pMEDIUM 6.90.1 %
CVE-2024-21781See referencesImproper input validation in UEFI firmware for some Intel(R) Processors may allow a privileged user to enable information disclosure or deniHIGH 7.00.2 %
CVE-2023-43626See referencesImproper access control in UEFI firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilHIGH 8.70.1 %
CVE-2024-21871See referencesImproper input validation in UEFI firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privHIGH 7.30.2 %