CVE-2020-0528
mediumpriority · track · 31EPSS 0.004 · 28 %ileEURUUSEPSS · scored 2026-10-27
Improper buffer restrictions in BIOS firmware for 7th, 8th, 9th and 10th Generation Intel(R) Core(TM) Processor families may allow an authenticated user to potentially enable escalation of privilege and/or denial of service via local access.
cvss
Technical severity, 0–10. One row per scoring source.
base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · medium–high · 4.6–7.8
weaknesses
The CWE weakness classes this flaw belongs to.
affected products (84)
Products and version ranges known to be affected.
- intel core i5-7300hq firmwareall versionsnvdUScpe:2.3:o:intel:core_i5-7300hq_firmware:*:*:*:*:*:*:*:*
- intel core i5-7440eq firmwareall versionsnvdUScpe:2.3:o:intel:core_i5-7440eq_firmware:*:*:*:*:*:*:*:*
- intel core i5-7440hq firmwareall versionsnvdUScpe:2.3:o:intel:core_i5-7440hq_firmware:*:*:*:*:*:*:*:*
- intel core i5-7442eq firmwareall versionsnvdUScpe:2.3:o:intel:core_i5-7442eq_firmware:*:*:*:*:*:*:*:*
also known as (4)
Other names and identifiers for this entity.
sources
Which sources assert this record, and when.
references (7)
External citations — patches, advisories, analysis.
- https://nvd.nist.gov/vuln/detail/CVE-2020-0528cnnvd
- https://support.lenovo.com/us/en/product_security/LEN-30042cnnvd
- https://vigilance.fr/vulnerability/Intel-BIOS-privilege-escalation-32546cnnvd
- https://www.auscert.org.au/bulletins/ESB-2020.1990/cnnvd
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00322.htmlcnnvd
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00322.htmlenisa_euvd
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00322.htmlVendor Advisorynvd
Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.
Free scan