https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T03:10:50.678248+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2025:7043 ALSA-2025:7043 — Moderate: microcode_ctl security update 2026-10-03T03:10:50.687325+00:00

Affected: AlmaLinux:9: microcode_ctl

The microcode_ctl packages provide microcode updates for Intel and AMD processors.

Security Fix(es):

* microcode_ctl: Improper input validation in UEFI firmware (CVE-2024-28047) * microcode_ctl: Insufficient granularity of access control in UEFI firmware (CVE-2024-39279) * microcode_ctl: mproper initialization in UEFI firmware OutOfBandXML module (CVE-2024-31157)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinuxRelease Notes linked from the References section.

 https://cve.radiocsirt.org/vuln/bdu:2025-02100 bdu:2025-02100 2026-10-03T03:10:50.687380+00:00 bdu:2025-02100 https://cve.radiocsirt.org/vuln/bell-cve-2024-28047 BELL-CVE-2024-28047 2026-10-03T03:10:50.687396+00:00

Affected: Alpaquita:23: intel-ucode, Alpaquita:stream: intel-ucode

 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0119 certfr-2025-avi-0119 — De multiples vulnérabilités ont été découvertes dans les produits Intel. Certaines d'entre elles permettent à un attaqu… 2026-10-03T03:10:50.687415+00:00 certfr-2025-avi-0119 https://cve.radiocsirt.org/vuln/euvd-2026-258110 EUVD-2026-258110 2026-10-03T03:10:50.687430+00:00 EUVD-2026-258110 https://cve.radiocsirt.org/vuln/fkie_cve-2024-28047 fkie_cve-2024-28047 2026-10-03T03:10:50.687441+00:00

Improper input validation in UEFI firmware for some Intel(R) Processors may allow a privileged user to potentially enable information disclosure via local access.

 https://cve.radiocsirt.org/vuln/ghsa-p87p-wmhg-7j37 GHSA-p87p-wmhg-7j37 2026-10-03T03:10:50.687459+00:00

Improper input validation in UEFI firmware for some Intel(R) Processors may allow a privileged user to potentially enable information disclosure via local access.

 https://cve.radiocsirt.org/vuln/gsd-2024-28047 gsd-2024-28047 2026-10-03T03:10:50.687471+00:00 gsd-2024-28047 https://cve.radiocsirt.org/vuln/oesa-2025-1171 OESA-2025-1171 — microcode_ctl security update 2026-10-03T03:10:50.687481+00:00

Affected: openEuler:20.03-LTS-SP4: microcode_ctl, openEuler:22.03-LTS-SP3: microcode_ctl, openEuler:22.03-LTS-SP4: microcode_ctl, openEuler:24.03-LTS: microcode_ctl, openEuler:24.03-LTS-SP1: microcode_ctl

This is a tool to transform and deploy microcode update for x86 CPUs. Security Fix(es):

Improper input validation in UEFI firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.(CVE-2023-34440)

Improper input validation in UEFI firmware for some Intel(R) processors may allow a privileged user to potentially enable escalation of privilege via local access.(CVE-2023-43758)

Improper input validation in XmlCli feature for UEFI firmware for some Intel(R) processors may allow privileged user to potentially enable escalation of privilege via local access.(CVE-2024-24582)

Improper input validation in UEFI firmware for some Intel(R) Processors may allow a privileged user to potentially enable information disclosure via local access.(CVE-2024-28047)

Improper input validation in UEFI firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.(CVE-2024-28127)

Improper input validation in UEFI firmware CseVariableStorageSmm for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.(CVE-2024-29214)

Improper Finite State Machines (FSMs) in Hardware Logic for some Intel(R) Processors may allow privileged user to potentially enable denial of service via local access.(CVE-2024-31068)

Improper initialization in UEFI firmware OutOfBandXML module in some Intel(R) Processors may allo…

 https://cve.radiocsirt.org/vuln/rhea-2025:3114 RHEA-2025:3114 — Red Hat Enhancement Advisory: microcode_ctl bug fix and enhancement update 2026-10-03T03:10:50.687524+00:00

microcode_ctl: Improper input validation in UEFI firmware microcode_ctl: Improper input validation in UEFI firmware microcode_ctl: Improper input validation in XmlCli feature for UEFI firmware microcode_ctl: Improper input validation in UEFI firmware microcode_ctl: Improper input validation in UEFI firmware microcode_ctl: Improper input validation in UEFI firmware CseVariableStorageSmm kernel: microcode_ctl: From CVEorg collector microcode_ctl: Improper initialization in UEFI firmware OutOfBandXML module kernel: microcode_ctl: From CVEorg collector microcode_ctl: Insufficient granularity of access control in UEFI firmware

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-28047 Withdrawn: UBUNTU-CVE-2024-28047 2026-10-03T03:10:50.687550+00:00

Withdrawn by the publisher.

Affected: Ubuntu:Pro:14.04:LTS: intel-microcode, Ubuntu:Pro:16.04:LTS: intel-microcode, Ubuntu:Pro:18.04:LTS: intel-microcode, Ubuntu:Pro:20.04:LTS: intel-microcode, Ubuntu:22.04:LTS: intel-microcode, Ubuntu:24.10: intel-microcode, Ubuntu:24.04:LTS: intel-microcode

Improper input validation in UEFI firmware for some Intel(R) Processors may allow a privileged user to potentially enable information disclosure via local access.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0323 WID-SEC-W-2025-0323 — Intel Firmware: Mehrere Schwachstellen 2026-10-03T03:10:50.687575+00:00

Ein lokaler Angreifer kann mehrere Schwachstellen in der Intel Firmware ausnutzen, um erweiterte Rechte zu erlangen, einen Denial of Service Zustand herbeizuführen oder vertrauliche Informationen preiszugeben.