Medium

DATE	CVE	VULNERABILITY TITLE	RISK
2023-08-11	CVE-2022-43505	Unspecified vulnerability in Intel products Insufficient control flow management in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable denial of service via local access. local low complexity intel	4.4
2023-05-10	CVE-2022-38087	Exposure of Resource to Wrong Sphere vulnerability in Intel products Exposure of resource to wrong sphere in BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable information disclosure via local access. local low complexity intel CWE-668	5.5
2023-02-16	CVE-2022-30704	Improper Initialization vulnerability in Intel products Improper initialization in the Intel(R) TXT SINIT ACM for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access. local low complexity intel CWE-665	6.7
2022-11-11	CVE-2022-21198	Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in Intel products Time-of-check time-of-use race condition in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access. local high complexity intel CWE-367	6.4
2022-05-12	CVE-2021-33124	Out-of-bounds Write vulnerability in Intel products Out-of-bounds write in the BIOS authenticated code module for some Intel(R) Processors may allow a privileged user to potentially enable aescalation of privilege via local access. local low complexity intel CWE-787	6.7
2022-02-09	CVE-2021-0118	Out-of-bounds Read vulnerability in multiple products Out-of-bounds read in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable an escalation of privilege via local access. local low complexity netapp intel CWE-125	6.7
2022-02-09	CVE-2021-0119	Improper Initialization vulnerability in multiple products Improper initialization in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via physical access. low complexity netapp intel CWE-665	6.2
2022-02-09	CVE-2021-0124	Improper access control in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via physical access. low complexity netapp intel	6.6
2022-02-09	CVE-2021-0125	Improper Initialization vulnerability in multiple products Improper initialization in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via physical access. low complexity netapp intel CWE-665	6.6