UEFI firmware for some Intel(R) Processors

7 published vulnerabilities name this product.

As the CNAs write it in their CVE records (vendor and product); the versions are theirs.

CVEVulnerable versionsTitleSeverityPublishedEPSSExploitation
CVE-2023-25546See referencesOut-of-bounds read in UEFI firmware for some Intel(R) Processors may allow a privileged user to potentially enable denial of service via locLOW 1.80.1 %
CVE-2023-22351See referencesOut-of-bounds write in UEFI firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege MEDIUM 6.90.1 %
CVE-2023-41833See referencesA race condition in UEFI firmware for some Intel(R) processors may allow a privileged user to potentially enable escalation of privilege viaHIGH 8.70.1 %
CVE-2023-23904See referencesNULL pointer dereference in the UEFI firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of pMEDIUM 6.90.1 %
CVE-2024-21781See referencesImproper input validation in UEFI firmware for some Intel(R) Processors may allow a privileged user to enable information disclosure or deniHIGH 7.00.2 %
CVE-2023-43626See referencesImproper access control in UEFI firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilHIGH 8.70.1 %
CVE-2024-21871See referencesImproper input validation in UEFI firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privHIGH 7.30.2 %