Intel Core I7 8500Y vulnerabilities, page 2

58 vulnerabilities

Known vulnerabilities in Intel Core I7 8500Y, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

6.6CVE-2021-0125intelatom_c3308+680
EPSS score
0.30%
Improper initialization in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via physical access.
6.8CVE-2021-33150intelatom_c2308_firmware+418
EPSS score
0.35%
Hardware allows activation of test or debug logic at runtime for some Intel(R) Trace Hub instances which may allow an unauthenticated user to potentially enable escalation of privilege via physical access.
7.2CVE-2021-33124intelcore_i3-1000g1_firmware+672
EPSS score
0.26%
Out-of-bounds write in the BIOS authenticated code module for some Intel(R) Processors may allow a privileged user to potentially enable aescalation of privilege via local access.
7.8CVE-2021-33123intelcore_i3-1000g1_firmware+672
EPSS score
0.26%
Improper access control in the BIOS authenticated code module for some Intel(R) Processors may allow a privileged user to potentially enable aescalation of privilege via local access.
5.5CVE-2020-0543alpinexen+710
EPSS score
0.54%
Incomplete cleanup from specific special register read operations in some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.
7.8CVE-2020-0529intelcore_i5-7200u_firmware+78
EPSS score
0.36%
Improper initialization in BIOS firmware for 8th, 9th and 10th Generation Intel(R) Core(TM) Processor families may allow an unauthenticated user to potentially enable escalation of privilege via local access.
7.8CVE-2020-0528intelcore_i5-7200u_firmware+78
EPSS score
0.35%
Improper buffer restrictions in BIOS firmware for 7th, 8th, 9th and 10th Generation Intel(R) Core(TM) Processor families may allow an authenticated user to potentially enable escalation of privilege and/or denial of service via local access.
5.6CVE-2020-0551ubuntulinux-azure+1324
EPSS score
1.08%
Load value injection in some Intel(R) Processors utilizing speculative execution may allow an authenticated user to potentially enable information disclosure via a side channel with local access. The list of affected products is provided in intel-sa-00334: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00334.html
7.6CVE-2020-24457intelcore_i7-10510u_firmware+49
EPSS score
0.39%
Logic error in BIOS firmware for 8th, 9th and 10th Generation Intel(R) Core(TM) Processors may allow an unauthenticated user to potentially enable escalation of privilege, denial of service and/or information disclosure via physical access.
5.5CVE-2020-8695debianintel-microcode+302
EPSS score
0.42%
Observable discrepancy in the RAPL interface for some Intel(R) Processors may allow a privileged user to potentially enable information disclosure via local access.
5.5CVE-2020-8694alpineintel-ucode+338
EPSS score
0.45%
Insufficient access control in the Linux kernel driver for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.
5.5CVE-2022-21151alpineintel-ucode+439
EPSS score
0.36%
Processor optimization removal or modification of security-critical code for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.
5.5CVE-2022-21180intelceleron_5305u_firmware+406
EPSS score
0.33%
Improper input validation for some Intel(R) Processors may allow an authenticated user to potentially cause a denial of service via local access.
6.5CVE-2022-40982alpineintel-ucode+641
EPSS score
3.05%
Information exposure through microarchitectural state after transient execution in certain vector execution units for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.
6.5CVE-2022-26047ubuntulinux-firmware+342
EPSS score
0.43%
Improper input validation for some Intel(R) PROSet/Wireless WiFi, Intel vPro(R) CSME WiFi and Killer(TM) WiFi products may allow unauthenticated user to potentially enable denial of service via local access.
5.5CVE-2022-26373debianlinux+578
EPSS score
0.37%
Non-transparent sharing of return predictor targets between contexts in some Intel(R) Processors may allow an authorized user to potentially enable information disclosure via local access.
6.5CVE-2022-0001debianlinux+529
EPSS score
0.51%
Non-transparent sharing of branch predictor selectors between contexts in some Intel(R) Processors may allow an authorized user to potentially enable information disclosure via local access.
2.4CVE-2022-0005intelceleron_g5205u_firmware+458
EPSS score
0.21%
Sensitive information accessible by physical probing of JTAG interface for some Intel(R) Processors with SGX may allow an unprivileged user to potentially enable information disclosure via physical access.
6.5CVE-2022-0002debianlinux+573
EPSS score
0.45%
Non-transparent sharing of branch predictor within a context in some Intel(R) Processors may allow an authorized user to potentially enable information disclosure via local access.
7.2CVE-2022-0004intelatom_p5921b_firmware+397
EPSS score
0.28%
Hardware debug modes and processor INIT setting that allow override of locks for some Intel(R) Processors in Intel(R) Boot Guard and Intel(R) TXT may allow an unauthenticated user to potentially enable escalation of privilege via physical access.