DeutschIn der Originalsprache angezeigt — eine vollständige Übersetzung ist für eine zukünftige Version geplant.
Intel IPU, UEFI Reference Firmware: Mehrere Schwachstellen
Advisory ansehen veröffentlicht 2026-03-10
Ein lokaler Angreifer kann mehrere Schwachstellen in Intel Firmware ausnutzen, um vertrauliche Informationen offenzulegen oder erhöhte Berechtigungen zu erlangen
01
beschreibt (10)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2025-22850US | — | — | ||
Time-of-check time-of-use race condition in the UEFI PdaSmm module for some Intel(R) reference platforms may allow an information disclosure. System software adversary with a privi… | ||||
| CVE-2025-22444US | — | — | ||
Exposure of resource to wrong sphere in the UEFI PdaSmm module for some Intel(R) reference platforms may allow an information disclosure. System software adversary with a privilege… | ||||
| CVE-2025-20105US | — | — | ||
Improper input validation in some UEFI firmware SMM module for the Intel(R) reference platforms may allow an escalation of privilege. System software adversary with a privileged us… | ||||
| CVE-2025-20096US | — | — | ||
Improper input validation in the UEFI firmware for some Intel Reference Platforms may allow an escalation of privilege. System software adversary with a privileged user combined wi… | ||||
| CVE-2025-20073US | — | — | ||
Improper buffer restrictions in the UEFI DXE module for some Intel(R) Reference Platforms within UEFI may allow an information disclosure. System software adversary with a privileg… | ||||
| CVE-2025-20068US | — | — | ||
Improper input validation in the UEFI ImcErrorHandler module for some Intel(R) reference platforms may allow an escalation of privilege. System software adversary with a privileged… | ||||
| CVE-2025-20064US | — | — | ||
Improper input validation in the UEFI FlashUcAcmSmm module for some Intel(R) reference platforms may allow an escalation of privilege. System software adversary with a privileged u… | ||||
| CVE-2025-20028US | — | — | ||
Time-of-check time-of-use race condition in the WheaERST SMM module for some Intel(R) reference platforms may allow an escalation of privilege. System software adversary with a pri… | ||||
| CVE-2025-20027US | — | — | ||
Improper input validation in the UEFI WheaERST module for some Intel(R) reference platforms may allow an escalation of privilege. System software adversary with a privileged user c… | ||||
| CVE-2025-20005US | — | — | ||
Improper buffer restrictions in some UEFI firmware for some Intel(R) reference platforms may allow an escalation of privilege. System software adversary with a privileged user comb… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- F5 Security Advisory K000160902 vom 2026-04-21external
- F5 Security Advisory K000161517 vom 2026-06-10external
- HP Security Bulletin HPSBHF04100 vom 2026-05-20external
- HP Security Bulletin HPSBHF04116 vom 2026-05-20external
- HP Security Bulletin HPESBHF05028 vom 2026-03-11external
- Lenovo Security Advisory LEN-213040 vom 2026-03-10external
- WID-SEC-W-2026-0666 - CSAF Versionself
- WID-SEC-2026-0666 - Portal Versionself
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan