Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 4

Export CSV
CVE-2026-20713

Privilege Escalation via Incorrect Firmware Control Flow in Intel Xeon Processors

Always-incorrect control flow implementation in some firmware for some Intel(R) Xeon(R) processors may allow an escalation of privilege. System software adversary with a privileged user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (none) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (high), integrity (high) and availability (none) impacts.

CVSS 4.0 · 4.5 Medium EPSS < 1% KEV · Not listed
Vendors
Intel
Products
Xeon 6315p Xeon 6315p Firmware Xeon 6325p and 378 more
CVE-2025-31936

kernel: microcode_ctl: Intel Xeon 6 Processors: Privilege escalation via improper memory range handling in SMM

Improper handling of overlap between protected memory ranges for some Intel(R) Xeon(R) 6 processors when using Intel(R) TDX within SMM may allow an escalation of privilege. SMM adversary with a privileged user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are present with special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.

CVSS 4.0 · 7 High EPSS < 1% KEV · Not listed
Vendors
Intel
Products
Xeon Xeon 6315p Xeon 6315p Firmware and 144 more
CVE-2026-20716

Improper Access Control in Intel Processors Leading to Privilege Escalation

Improper access control for some Intel(R) Processors within Ring 3: User Applications may allow an escalation of privilege. Simple hardware adversary with an authenticated user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are present with special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.

CVSS 4.0 · 7.2 High EPSS < 1% KEV · Not listed
Vendors
Intel
Products
Intel Processors Xeon 6315p Xeon 6315p Firmware and 178 more
CVE-2026-20898

Firmware Access Control Flaw Enabling Local Privilege Escalation on Intel Xeon Processors

Improper access control in the firmware for some in Alias Checking Trusted Module for some Intel(R) Xeon(R) processors may allow an escalation of privilege. Startup code and SMM adversary with a privileged user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (high), integrity (high) and availability (none) impacts.

CVSS 4.0 · 8.5 High EPSS < 1% KEV · Not listed
Vendors
Intel
Products
Alias Checking Trusted Module Xeon 6315p Xeon 6315p Firmware and 348 more