Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-j38j-4xcw-8784

Опубликовано: 11 авг. 2026
Источник: github
Github: Не прошло ревью
CVSS4: 4
CVSS3: 5.3

Описание

Improper input validation for some Intel(R) Xeon(R) processors within firmware may allow an escalation of privilege. Startup code and smm adversary with a privileged user combined with a high complexity attack may enable data alteration. This result may potentially occur via local access when attack requirements are present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (none) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (high) and availability (none) impacts.

Improper input validation for some Intel(R) Xeon(R) processors within firmware may allow an escalation of privilege. Startup code and smm adversary with a privileged user combined with a high complexity attack may enable data alteration. This result may potentially occur via local access when attack requirements are present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (none) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (high) and availability (none) impacts.

EPSS

Процентиль: 1%
0.00097
Низкий

4 Medium

CVSS4

5.3 Medium

CVSS3

Дефекты

CWE-20

Связанные уязвимости

CVSS3: 5.3
ubuntu
около 1 месяца назад

Improper input validation for some Intel(R) Xeon(R) processors within firmware may allow an escalation of privilege. Startup code and smm adversary with a privileged user combined with a high complexity attack may enable data alteration. This result may potentially occur via local access when attack requirements are present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (none) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (high) and availability (none) impacts.

CVSS3: 5.3
nvd
около 1 месяца назад

Improper input validation for some Intel(R) Xeon(R) processors within firmware may allow an escalation of privilege. Startup code and smm adversary with a privileged user combined with a high complexity attack may enable data alteration. This result may potentially occur via local access when attack requirements are present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (none) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (high) and availability (none) impacts.

CVSS3: 5.3
debian
около 1 месяца назад

Improper input validation for some Intel(R) Xeon(R) processors within ...

suse-cvrf
8 дней назад

Security update for ucode-intel

oracle-oval
9 дней назад

ELSA-2026-500239: microcode_ctl security update (IMPORTANT)

EPSS

Процентиль: 1%
0.00097
Низкий

4 Medium

CVSS4

5.3 Medium

CVSS3

Дефекты

CWE-20