High

DATE	CVE	VULNERABILITY TITLE	RISK
2022-05-12	CVE-2021-0159	Improper Input Validation vulnerability in Intel products Improper input validation in the BIOS authenticated code module for some Intel(R) Processors may allow a privileged user to potentially enable aescalation of privilege via local access. local low complexity intel CWE-20	7.8
2022-05-12	CVE-2021-0189	Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Intel products Use of out-of-range pointer offset in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable aescalation of privilege via local access. local low complexity intel CWE-119	7.8
2022-05-12	CVE-2021-33123	Unspecified vulnerability in Intel products Improper access control in the BIOS authenticated code module for some Intel(R) Processors may allow a privileged user to potentially enable aescalation of privilege via local access. local low complexity intel	7.8
2022-02-09	CVE-2021-0116	Out-of-bounds Write vulnerability in multiple products Out-of-bounds write in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable an escalation of privilege via local access. local low complexity netapp intel CWE-787	7.8
2022-02-09	CVE-2021-0117	Pointer issues in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable an escalation of privilege via local access. local low complexity netapp intel	7.8
2022-02-09	CVE-2021-0156	Improper Input Validation vulnerability in multiple products Improper input validation in the firmware for some Intel(R) Processors may allow an authenticated user to potentially enable an escalation of privilege via local access. local low complexity netapp intel CWE-20	7.8
2020-11-12	CVE-2020-0590	Improper Input Validation vulnerability in multiple products Improper input validation in BIOS firmware for some Intel(R) Processors may allow an authenticated user to potentially enable escalation of privilege via local access. local low complexity intel netapp siemens CWE-20	7.8
2019-11-14	CVE-2019-11137	Improper Input Validation vulnerability in multiple products Insufficient input validation in system firmware for Intel(R) Xeon(R) Scalable Processors, Intel(R) Xeon(R) Processors D Family, Intel(R) Xeon(R) Processors E5 v4 Family, Intel(R) Xeon(R) Processors E7 v4 Family and Intel(R) Atom(R) processor C Series may allow a privileged user to potentially enable escalation of privilege, denial of service and/or information disclosure via local access. local low complexity intel hpe CWE-20	8.2