DeutschIn der Originalsprache angezeigt — eine vollständige Übersetzung ist für eine zukünftige Version geplant.
Intel Prozessoren: Mehrere Schwachstellen
Advisory ansehen veröffentlicht 2026-02-10
Ein Angreifer kann mehrere Schwachstellen in Intel Prozessor und Intel Chipset ausnutzen, um seine Privilegien zu erhöhen, einen Denial-of-Service-Zustand zu verursachen oder vertrauliche Informationen offenzulegen.
01
beschreibt (15)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2025-35992US | — | — | ||
Improper conditions check in some firmware for some Intel(R) NPU Drivers within Ring 1: Device Drivers may allow a denial of service. Unprivileged software adversary with an authen… | ||||
| CVE-2025-33030US | — | — | ||
Improper conditions check in some firmware for some Intel(R) NPU Drivers within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with… | ||||
| CVE-2025-32735US | — | — | ||
Improper conditions check in some firmware for some Intel(R) NPU Drivers within Ring 1: Device Drivers may allow a denial of service. Unprivileged software adversary with an authen… | ||||
| CVE-2025-32467US | — | — | ||
Use of uninitialized variable for some TDX Module before version tdx1.5 within Ring 0: Hypervisor may allow an information disclosure. Authorized adversary with a privileged user c… | ||||
| CVE-2025-32008US | — | — | ||
Out-of-bounds write in the firmware for the Intel(R) AMT and Intel(R) Standard Manageability within Ring 3: User Applications may allow a denial of service. Network adversary with… | ||||
| CVE-2025-32007US | — | — | ||
Out-of-bounds read for some TDX before version tdx module 1.5.24 within Ring 0: Hypervisor may allow an information disclosure. Authorized adversary with a privileged user combined… | ||||
| CVE-2025-31944US | — | — | ||
Race condition for some TDX Module before version tdx1.5 within Ring 0: Hypervisor may allow a denial of service. Authorized adversary with a privileged user combined with a high c… | ||||
| CVE-2025-31648US | — | — | ||
Improper handling of values in the microcode flow for some Intel(R) Processor Family may allow an escalation of privilege. Startup code and smm adversary with a privileged user com… | ||||
| CVE-2025-30513US | — | — | ||
Race condition for some TDX Module within Ring 0: Hypervisor may allow an escalation of privilege. System software adversary with a privileged user combined with a low complexity a… | ||||
| CVE-2025-27940US | — | — | ||
Out-of-bounds read for some TDX Module before version tdx1.5 within Ring 0: Hypervisor may allow an information disclosure. Software side channel adversary with a privileged user c… | ||||
| CVE-2025-27708US | — | — | ||
Out-of-bounds read in the firmware for some Intel(R) Converged Security and Management Engine (CSME) Firmware (FW) within Ring 0: Kernel may allow an information disclosure. System… | ||||
| CVE-2025-27572US | — | — | ||
Exposure of sensitive information during transient execution for some TDX within Ring 0: Hypervisor may allow an information disclosure. Authorized adversary with a privileged user… | ||||
| CVE-2025-27560US | — | — | ||
Loop with unreachable exit condition ('infinite loop') for some Intel(R) Platform within Ring 0: Kernel may allow a denial of service. System software adversary with a privileged u… | ||||
| CVE-2025-22885US | — | — | ||
Improper buffer restrictions in the firmware for the TDX Module may allow an escalation of privilege. System software adversary with a privileged user combined with a high complexi… | ||||
| CVE-2025-20080US | — | — | ||
Null pointer dereference in the firmware for some Intel(R) AMT and Intel(R) Standard Manageability within Ring 0: Kernel may allow a denial of service. Network adversary with an un… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- openSUSE Security Update OPENSUSE-SU-2026:10229-1 vom 2026-02-20external
- SUSE Security Update SUSE-SU-2026:20941-1 vom 2026-04-01external
- SUSE Security Update SUSE-SU-2026:0670-1 vom 2026-02-27external
- SUSE Security Update SUSE-SU-2026:0669-1 vom 2026-02-27external
- SUSE Security Update SUSE-SU-2026:0668-1 vom 2026-02-27external
- SUSE Security Update SUSE-SU-2026:20522-1 vom 2026-02-28external
- SUSE Security Update SUSE-SU-2026:20682-1 vom 2026-03-18external
- SUSE Security Update SUSE-SU-2026:20758-1 vom 2026-03-24external
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan