Intel Xeon W 2235 vulnerabilities, page 2
38 vulnerabilities
Known vulnerabilities in Intel Xeon W 2235, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2021-0125intelatom_c3308+680
EPSS score0.30%
Improper initialization in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via physical access.CVE-2021-33124intelcore_i3-1000g1_firmware+672EPSS score0.26%
Out-of-bounds write in the BIOS authenticated code module for some Intel(R) Processors may allow a privileged user to potentially enable aescalation of privilege via local access.CVE-2021-33123intelcore_i3-1000g1_firmware+672EPSS score0.26%
Improper access control in the BIOS authenticated code module for some Intel(R) Processors may allow a privileged user to potentially enable aescalation of privilege via local access.CVE-2020-0549canonicalubuntu_linux+433EPSS score0.56%
Cleanup errors in some data cache evictions for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.CVE-2020-0548alpineintel-ucode+430EPSS score0.52%
Cleanup errors in some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.CVE-2020-0551ubuntulinux-azure+1324EPSS score1.08%
Load value injection in some Intel(R) Processors utilizing speculative execution may allow an authenticated user to potentially enable information disclosure via a side channel with local access. The list of affected products is provided in intel-sa-00334: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00334.htmlCVE-2022-21198intelceleron_1000m_firmware+446EPSS score0.15%
Time-of-check time-of-use race condition in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.CVE-2022-40982alpineintel-ucode+641EPSS score3.05%
Information exposure through microarchitectural state after transient execution in certain vector execution units for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.CVE-2022-26373debianlinux+578EPSS score0.37%
Non-transparent sharing of return predictor targets between contexts in some Intel(R) Processors may allow an authorized user to potentially enable information disclosure via local access.CVE-2022-26837intelcore_i3-11100he_firmware+226EPSS score0.22%
Improper input validation in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.CVE-2022-0001debianlinux+529EPSS score0.51%
Non-transparent sharing of branch predictor selectors between contexts in some Intel(R) Processors may allow an authorized user to potentially enable information disclosure via local access.CVE-2022-0005intelceleron_g5205u_firmware+458EPSS score0.21%
Sensitive information accessible by physical probing of JTAG interface for some Intel(R) Processors with SGX may allow an unprivileged user to potentially enable information disclosure via physical access.CVE-2022-0002debianlinux+573EPSS score0.45%
Non-transparent sharing of branch predictor within a context in some Intel(R) Processors may allow an authorized user to potentially enable information disclosure via local access.CVE-2022-43505intelatom_c3308+905EPSS score0.17%
Insufficient control flow management in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable denial of service via local access.CVE-2022-38087intelcore_i3-1000g1_firmware+466EPSS score0.18%
Exposure of resource to wrong sphere in BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable information disclosure via local access.CVE-2022-30704intelceleron_1000m_firmware+466EPSS score0.21%
Improper initialization in the Intel(R) TXT SINIT ACM for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.CVE-2019-11135alpineintel-ucode+407EPSS score3.13%
TSX Asynchronous Abort condition on some CPUs utilizing speculative execution may allow an authenticated user to potentially enable information disclosure via a side channel with local access.CVE-2019-14607debianintel-microcode+379EPSS score0.34%
Improper conditions check in multiple Intel® Processors may allow an authenticated user to potentially enable partial escalation of privilege, denial of service and/or information disclosure via local access.