Medium

DATE	CVE	VULNERABILITY TITLE	RISK
2023-08-11	CVE-2022-40982	Information Exposure Through Discrepancy vulnerability in multiple products Information exposure through microarchitectural state after transient execution in certain vector execution units for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access. local low complexity redhat xen intel debian netapp CWE-203	6.5
2023-08-11	CVE-2022-43505	Unspecified vulnerability in Intel products Insufficient control flow management in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable denial of service via local access. local low complexity intel	4.4
2023-05-10	CVE-2022-38087	Exposure of Resource to Wrong Sphere vulnerability in Intel products Exposure of resource to wrong sphere in BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable information disclosure via local access. local low complexity intel CWE-668	5.5
2023-02-16	CVE-2022-38090	Unspecified vulnerability in Intel products Improper isolation of shared resources in some Intel(R) Processors when using Intel(R) Software Guard Extensions may allow a privileged user to potentially enable information disclosure via local access. local low complexity intel	4.4
2023-02-16	CVE-2022-30704	Improper Initialization vulnerability in Intel products Improper initialization in the Intel(R) TXT SINIT ACM for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access. local low complexity intel CWE-665	6.7
2022-11-11	CVE-2022-21198	Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in Intel products Time-of-check time-of-use race condition in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access. local high complexity intel CWE-367	6.4
2022-11-11	CVE-2022-26047	Improper Input Validation vulnerability in Intel products Improper input validation for some Intel(R) PROSet/Wireless WiFi, Intel vPro(R) CSME WiFi and Killer(TM) WiFi products may allow unauthenticated user to potentially enable denial of service via local access. low complexity intel CWE-20	6.5
2022-08-18	CVE-2022-21233	Unspecified vulnerability in Intel products Improper isolation of shared resources in some Intel(R) Processors may allow a privileged user to potentially enable information disclosure via local access. local low complexity intel	5.5
2022-08-18	CVE-2022-26373	Non-transparent sharing of return predictor targets between contexts in some Intel(R) Processors may allow an authorized user to potentially enable information disclosure via local access. local low complexity intel debian	5.5
2022-05-12	CVE-2021-33103	Unspecified vulnerability in Intel products Unintended intermediary in the BIOS authenticated code module for some Intel(R) Processors may allow a privileged user to potentially enable aescalation of privilege via local access. local low complexity intel	6.7