Intel Corp. Intel Microcode

Name: Intel Corp. Intel Microcode
Brand: Intel Corp.

productRU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

critical

by severity

0critical0high16medium0low

updated 2026-10-27

vulnerabilities (20)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2022-21127US	medium5.5	5.51% (93rd)	—	no fix	2022-06-15	≤ 3.20220510.1
CVE-2022-40982US	medium6.5	3.05% (87th)	—	no fix	2023-08-11	≤ 20230808
CVE-2021-33120US	medium5.4	0.95% (61st)	—	no fix	2022-02-09	≤ 3.20220207.1
CVE-2023-39368US	—	0.76% (55th)	—	no fix	2024-03-14	≤ microcode-20240312
CVE-2020-0549US	medium5.5	0.56% (47th)	—	no fix	2020-01-28	≤ 3.20200609.2
CVE-2020-0543US	medium5.5	0.54% (45th)	—	no fix	2020-06-15	≤ intel:celeron 1000m - g4950intel:core 4205u - i3-4350
CVE-2022-21216US	medium6.8	0.54% (45th)	—	no fix	2023-02-16	≤ 3.20230214.1
CVE-2020-0548US	medium5.5	0.52% (44th)	—	no fix	2020-01-28	≤ 3.20200609.2
CVE-2020-8696US	medium5.5	0.44% (38th)	—	no fix	2020-11-12	≤ 3.20201110.0
CVE-2020-8695US	medium5.5	0.42% (36th)	—	no fix	2020-11-12	≤ 3.20201110.0ubuntu0.20.04.1
CVE-2021-0145US	medium5.5	0.33% (25th)	—	no fix	2022-02-09	≤ 3.20220207.1
CVE-2021-0127US	medium5.5	0.30% (22nd)	—	no fix	2022-02-09	≤ 3.20220207.1
CVE-2022-41804US	medium6.7	0.27% (20th)	—	no fix	2023-08-11	≤ 3.20230808.1
CVE-2023-23908US	medium4.4	0.25% (16th)	—	no fix	2023-08-11	≤ 3.20230808.1
CVE-2022-38090US	medium4.4	0.25% (16th)	—	no fix	2023-02-16	≤ 3.20230214.1
CVE-2022-33972US	medium4.4	0.22% (12th)	—	no fix	2023-02-16	≤ 3.20230214.1
CVE-2022-33196US	medium6.7OT elevated	0.21% (11th)	—	no fix	2023-02-16	≤ 3.20230214.1
CVE-2025-20623US	—	0.20% (10th)	—	no fix	2025-05-13	≤ 3.20250512.1
CVE-2025-20054US	—	0.19% (9th)	—	no fix	2025-05-13	≤ 20250512
CVE-2025-20103US	—	0.18% (7th)	—	no fix	2025-05-13	≤ 3.20250512.1

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-200Exposure of Sensitive Information to an Unauthorized Actor8 CVEs
CWE-203Observable Discrepancy2 CVEs
CWE-284Improper Access Control2 CVEs
CWE-404Improper Resource Shutdown or Release2 CVEs
CWE-452CWE-4522 CVEs
CWE-459Incomplete Cleanup2 CVEs
CWE-125Out-of-bounds Read1 CVEs
CWE-1334Unauthorized Error Injection Can Degrade Hardware Redundancy1 CVEs

sources (1)

Which sources assert this record, and when.

RUBDU (FSTEC Data Security Threats Database)20 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan