Bios vulnerabilities | LiveThreat CVE Feed

Product

Bios

by Intel · last CVE May 12, 2022

CVEs

On KEV

8.0

Max CVSS

New 30D

Vulnerabilities27 In the news0 Timeline

Severity mix

Critical 0High 5Medium 20Low 0

Severity

All severities27 Critical0 High5 Medium20 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Bios to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2019-14557	8.0	1%	Oct 5	Buffer overflow in BIOS firmware for 8th, 9th, 10th Generation Intel(R) Core(TM), Intel(R) Celeron(R) Processor 4000 & 5000 Series Processors may allow an authenticated user to… Affected: All versions, or not specified
CVE-2020-12360	7.8	0%	Jun 9	Out of bounds read in the firmware for some Intel(R) Processors may allow an authenticated user to potentially enable escalation of privilege via local access Affected: All versions, or not specified
CVE-2020-8672	7.8	0%	Feb 2	Out of bound read in BIOS firmware for 8th, 9th Generation Intel(R) Core(TM), Intel(R) Celeron(R) Processor 4000 Series Processors may allow an unauthenticated user to potentially… Affected: All versions, or not specified
CVE-2020-8739	7.8	0%	Nov 12	Use of potentially dangerous function in Intel BIOS platform sample code for some Intel(R) Processors may allow an authenticated user to potentially enable escalation of privilege… Affected: All versions, or not specified
CVE-2018-3612	7.8	0%	May 10	Intel NUC kits with insufficient input validation in system firmware, potentially allows a local attacker to elevate privileges to System Management Mode (SMM) Affected: ayaplcel.86a; bnkbl357.86a; ccsklm5v.86a; ccsklm30.86a; dnkbli5v.86a; dnkbli7v.86a; +11 more
CVE-2020-12359	6.8	0%	Jun 9	Insufficient control flow management in the firmware for some Intel(R) Processors may allow an unauthenticated user to potentially enable escalation of privilege via physical… Affected: All versions, or not specified
CVE-2020-8700	6.7	0%	Jun 9	Improper input validation in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access Affected: All versions, or not specified
CVE-2020-12357	6.7	0%	Jun 9	Improper initialization in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access Affected: All versions, or not specified
CVE-2020-8764	6.7	0%	Nov 12	Improper access control in BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access Affected: All versions, or not specified
CVE-2020-8740	6.7	0%	Nov 12	Out of bounds write in Intel BIOS platform sample code for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access Affected: All versions, or not specified
CVE-2020-8738	6.7	0%	Nov 12	Improper conditions check in Intel BIOS platform sample code for some Intel(R) Processors before may allow a privileged user to potentially enable escalation of privilege via… Affected: All versions, or not specified
CVE-2020-0593	6.7	0%	Nov 12	Improper buffer restrictions in BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access Affected: All versions, or not specified
CVE-2020-0592	6.7	0%	Nov 12	Out of bounds write in BIOS firmware for some Intel(R) Processors may allow an authenticated user to potentially enable escalation of privilege and/or denial of service via local… Affected: All versions, or not specified
CVE-2020-0591	6.7	0%	Nov 12	Improper buffer restrictions in BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access Affected: All versions, or not specified
CVE-2020-0588	6.7	0%	Nov 12	Improper conditions check in BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access Affected: All versions, or not specified
CVE-2020-0587	6.7	0%	Nov 12	Improper conditions check in BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access Affected: All versions, or not specified
CVE-2020-8670	6.4	0%	Jun 9	Race condition in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access Affected: All versions, or not specified
CVE-2019-14558	5.7	1%	Oct 5	Insufficient control flow management in BIOS firmware for 8th, 9th, 10th Generation Intel(R) Core(TM), Intel(R) Celeron(R) Processor 4000 & 5000 Series Processors may allow an… Affected: All versions, or not specified
CVE-2021-33117	5.5	0%	May 12	Improper access control for some 3rd Generation Intel(R) Xeon(R) Scalable Processors before BIOS version MR7, may allow a local attacker to potentially enable information… Affected: before mr7
CVE-2020-24486	5.5	0%	Jun 9	Improper input validation in the firmware for some Intel(R) Processors may allow an authenticated user to potentially enable denial of service via local access Affected: All versions, or not specified
CVE-2020-8671	5.5	0%	Oct 5	Insufficient control flow management in BIOS firmware 8th, 9th Generation Intel(R) Core(TM) Processors and Intel(R) Celeron(R) Processor 4000 Series may allow an authenticated… Affected: All versions, or not specified
CVE-2020-0571	5.5	0%	Oct 5	Improper conditions check in BIOS firmware for 8th Generation Intel(R) Core(TM) Processors and Intel(R) Pentium(R) Silver Processor Series may allow an authenticated user to… Affected: All versions, or not specified
CVE-2021-0095	4.4	0%	Jun 9	Improper initialization in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable a denial of service via local access Affected: All versions, or not specified
CVE-2020-12358	4.4	0%	Jun 9	Out of bounds write in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable denial of service via local access Affected: All versions, or not specified
CVE-2019-14556	4.4	0%	Oct 5	Improper initialization in BIOS firmware for 8th, 9th, 10th Generation Intel(R) Core(TM), Intel(R) Celeron(R) Processor 4000 & 5000 Series Processors may allow a privileged user… Affected: All versions, or not specified
CVE-2008-7096	–	0%	Aug 27	Intel Desktop and Intel Mobile Boards with BIOS firmware DQ35JO, DQ35MP, DP35DP, DG33FB, DG33BU, DG33TL, MGM965TW, D945GCPE, and DX38BT allows local administrators with ring 0… Affected: dg33bu; dg33fb; dg33tl; dp35dp; dq35jo; dq35mp; +2 more
CVE-2008-3900	–	0%	Sep 3	Intel firmware PE94510M.86A.0050.2007.0710.1559 stores pre-boot authentication passwords in the BIOS Keyboard buffer and does not clear this buffer after use, which allows local… Affected: pe94510m.86a.0050.2007.0710.1559