Vulnerabilities > Intel > Medium

DATE CVE VULNERABILITY TITLE RISK
2022-05-12 CVE-2022-21151 Processor optimization removal or modification of security-critical code for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.
local
low complexity
intel netapp debian
5.5
2022-05-12 CVE-2022-21237 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Intel products
Improper buffer access in firmware for some Intel(R) NUCs may allow a privileged user to potentially enable escalation of privilege via local access.
local
low complexity
intel CWE-119
6.7
2022-05-12 CVE-2022-24297 Unspecified vulnerability in Intel products
Improper buffer restrictions in firmware for some Intel(R) NUCs may allow a privileged user to potentially enable escalation of privilege via local access.
local
low complexity
intel
6.7
2022-05-12 CVE-2022-24382 Improper Input Validation vulnerability in Intel products
Improper input validation in firmware for some Intel(R) NUCs may allow a privileged user to potentially enable escalation of privilege via local access.
local
low complexity
intel CWE-20
6.7
2022-03-11 CVE-2021-33150 Unspecified vulnerability in Intel products
Hardware allows activation of test or debug logic at runtime for some Intel(R) Trace Hub instances which may allow an unauthenticated user to potentially enable escalation of privilege via physical access.
low complexity
intel
6.8
2022-03-11 CVE-2022-0001 Non-transparent sharing of branch predictor selectors between contexts in some Intel(R) Processors may allow an authorized user to potentially enable information disclosure via local access.
local
low complexity
intel oracle
6.5
2022-03-11 CVE-2022-0002 Non-transparent sharing of branch predictor within a context in some Intel(R) Processors may allow an authorized user to potentially enable information disclosure via local access.
local
low complexity
intel oracle
6.5
2022-02-09 CVE-2021-0060 Insufficient compartmentalization in HECI subsystem for the Intel(R) SPS before versions SPS_E5_04.01.04.516.0, SPS_E5_04.04.04.033.0, SPS_E5_04.04.03.281.0, SPS_E5_03.01.03.116.0, SPS_E3_05.01.04.309.0, SPS_02.04.00.101.0, SPS_SoC-A_05.00.03.114.0, SPS_SoC-X_04.00.04.326.0, SPS_SoC-X_03.00.03.117.0, IGN_E5_91.00.00.167.0, SPS_PHI_03.01.03.078.0 may allow an authenticated user to potentially enable escalation of privilege via physical access.
low complexity
intel netapp
6.6
2022-02-09 CVE-2021-0072 Improper Input Validation vulnerability in Intel products
Improper input validation in firmware for some Intel(R) PROSet/Wireless Wi-Fi in multiple operating systems and some Killer(TM) Wi-Fi in Windows 10 and 11 may allow a privileged user to potentially enable information disclosure via local access.
local
low complexity
intel CWE-20
5.5
2022-02-09 CVE-2021-0076 Improper Input Validation vulnerability in Intel products
Improper Validation of Specified Index, Position, or Offset in Input in firmware for some Intel(R) PROSet/Wireless Wi-Fi in multiple operating systems and some Killer(TM) Wi-Fi in Windows 10 and 11 may allow a privileged user to potentially enable denial of service via local access.
local
low complexity
intel CWE-20
5.5