Most recent entries from all

bdu:2025-02127

BELL-CVE-2024-29214

Affected: Alpaquita:23: intel-ucode, Alpaquita:stream: intel-ucode

certfr-2025-avi-0119 — De multiples vulnérabilités ont été découvertes dans les produits Intel. Certaines d'entre elles permettent à un attaqu…

certfr-2025-avi-0119

EUVD-2026-258112

fkie_cve-2024-29214

Improper input validation in UEFI firmware CseVariableStorageSmm for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.

GHSA-244r-4cqf-v63r

Improper input validation in UEFI firmware CseVariableStorageSmm for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.

gsd-2024-29214

OESA-2025-1171 — microcode_ctl security update

Affected: openEuler:20.03-LTS-SP4: microcode_ctl, openEuler:22.03-LTS-SP3: microcode_ctl, openEuler:22.03-LTS-SP4: microcode_ctl, openEuler:24.03-LTS: microcode_ctl, openEuler:24.03-LTS-SP1: microcode_ctl

This is a tool to transform and deploy microcode update for x86 CPUs. Security Fix(es):

Improper input validation in UEFI firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.(CVE-2023-34440)

Improper input validation in UEFI firmware for some Intel(R) processors may allow a privileged user to potentially enable escalation of privilege via local access.(CVE-2023-43758)

Improper input validation in XmlCli feature for UEFI firmware for some Intel(R) processors may allow privileged user to potentially enable escalation of privilege via local access.(CVE-2024-24582)

Improper input validation in UEFI firmware for some Intel(R) Processors may allow a privileged user to potentially enable information disclosure via local access.(CVE-2024-28047)

Improper input validation in UEFI firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.(CVE-2024-28127)

Improper input validation in UEFI firmware CseVariableStorageSmm for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.(CVE-2024-29214)

Improper Finite State Machines (FSMs) in Hardware Logic for some Intel(R) Processors may allow privileged user to potentially enable denial of service via local access.(CVE-2024-31068)

Improper initialization in UEFI firmware OutOfBandXML module in some Intel(R) Processors may allo…

RHBA-2025:2428 — Red Hat Bug Fix Advisory: microcode_ctl bug fix and enhancement update

microcode_ctl: Improper input validation in UEFI firmware microcode_ctl: Improper input validation in UEFI firmware microcode_ctl: Improper input validation in XmlCli feature for UEFI firmware microcode_ctl: Improper input validation in UEFI firmware microcode_ctl: Improper input validation in UEFI firmware CseVariableStorageSmm

RHBA-2025:2991 — Red Hat Bug Fix Advisory: microcode_ctl bug fix and enhancement update

Withdrawn: UBUNTU-CVE-2024-29214

Withdrawn by the publisher.

Affected: Ubuntu:Pro:14.04:LTS: intel-microcode, Ubuntu:Pro:16.04:LTS: intel-microcode, Ubuntu:Pro:18.04:LTS: intel-microcode, Ubuntu:Pro:20.04:LTS: intel-microcode, Ubuntu:22.04:LTS: intel-microcode, Ubuntu:24.10: intel-microcode, Ubuntu:24.04:LTS: intel-microcode

Improper input validation in UEFI firmware CseVariableStorageSmm for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.

WID-SEC-W-2025-0323 — Intel Firmware: Mehrere Schwachstellen

Ein lokaler Angreifer kann mehrere Schwachstellen in der Intel Firmware ausnutzen, um erweiterte Rechte zu erlangen, einen Denial of Service Zustand herbeizuführen oder vertrauliche Informationen preiszugeben.