threat
engine
.sh
Back
·
··:··
Home
/
Product
/
intel bios
Product
intel bios
33 known vulnerabilities across versions
Vulnerabilities are listed by affected version. Select any CVE for the full briefing and its intelligence graph.
Sort
Newest first
Oldest first
Highest CVSS
Lowest CVSS
Min CVSS
Any
4.0+
7.0+ (High)
9.0+ (Critical)
Published since
Reset
CVE-2022-32492
< 2.21.0
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this v
7.5
HIGH
CVE-2022-32486
< 2.21.0
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this v
7.5
HIGH
CVE-2021-33117
< mr7
Improper access control for some 3rd Generation Intel(R) Xeon(R) Scalable Processors before BIOS version MR7, may allow a local at
5.5
MEDIUM
CVE-2021-0095
all versions
Improper initialization in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable a denial of
4.4
MEDIUM
CVE-2020-8700
all versions
Improper input validation in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalatio
6.7
MEDIUM
CVE-2020-8670
all versions
Race condition in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privil
6.4
MEDIUM
CVE-2020-24486
all versions
Improper input validation in the firmware for some Intel(R) Processors may allow an authenticated user to potentially enable denia
5.5
MEDIUM
CVE-2020-12360
all versions
Out of bounds read in the firmware for some Intel(R) Processors may allow an authenticated user to potentially enable escalation o
7.8
HIGH
CVE-2020-12359
all versions
Insufficient control flow management in the firmware for some Intel(R) Processors may allow an unauthenticated user to potentially
6.8
MEDIUM
CVE-2020-12358
all versions
Out of bounds write in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable denial of servi
4.4
MEDIUM
CVE-2020-12357
all versions
Improper initialization in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation
6.7
MEDIUM
CVE-2020-8672
all versions
Out of bound read in BIOS firmware for 8th, 9th Generation Intel(R) Core(TM), Intel(R) Celeron(R) Processor 4000 Series Processors
7.8
HIGH
CVE-2020-8764
all versions
Improper access control in BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation
6.7
MEDIUM
CVE-2020-8740
all versions
Out of bounds write in Intel BIOS platform sample code for some Intel(R) Processors may allow a privileged user to potentially ena
6.7
MEDIUM
CVE-2020-8739
all versions
Use of potentially dangerous function in Intel BIOS platform sample code for some Intel(R) Processors may allow an authenticated u
7.8
HIGH
CVE-2020-8738
all versions
Improper conditions check in Intel BIOS platform sample code for some Intel(R) Processors before may allow a privileged user to po
6.7
MEDIUM
CVE-2020-0593
all versions
Improper buffer restrictions in BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable escal
6.7
MEDIUM
CVE-2020-0592
all versions
Out of bounds write in BIOS firmware for some Intel(R) Processors may allow an authenticated user to potentially enable escalation
6.7
MEDIUM
CVE-2020-0591
all versions
Improper buffer restrictions in BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable escal
6.7
MEDIUM
CVE-2020-0588
all versions
Improper conditions check in BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalati
6.7
MEDIUM
CVE-2020-0587
all versions
Improper conditions check in BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalati
6.7
MEDIUM
CVE-2020-8671
all versions
Insufficient control flow management in BIOS firmware 8th, 9th Generation Intel(R) Core(TM) Processors and Intel(R) Celeron(R) Pro
5.5
MEDIUM
CVE-2020-0571
all versions
Improper conditions check in BIOS firmware for 8th Generation Intel(R) Core(TM) Processors and Intel(R) Pentium(R) Silver Processo
5.5
MEDIUM
CVE-2019-14558
all versions
Insufficient control flow management in BIOS firmware for 8th, 9th, 10th Generation Intel(R) Core(TM), Intel(R) Celeron(R) Process
5.7
MEDIUM
CVE-2019-14557
all versions
Buffer overflow in BIOS firmware for 8th, 9th, 10th Generation Intel(R) Core(TM), Intel(R) Celeron(R) Processor 4000 & 5000 Series
8.0
HIGH
CVE-2019-14556
all versions
Improper initialization in BIOS firmware for 8th, 9th, 10th Generation Intel(R) Core(TM), Intel(R) Celeron(R) Processor 4000 & 500
4.4
MEDIUM
CVE-2018-3612
all versions
Intel NUC kits with insufficient input validation in system firmware, potentially allows a local attacker to elevate privileges to
7.8
HIGH
CVE-2017-3754
all versions
Some Lenovo brand notebook systems do not have write protections properly configured in the system BIOS. This could enable an atta
6.7
MEDIUM
CVE-2016-8224
all versions
A vulnerability has been identified in some Lenovo Notebook and ThinkServer systems where an attacker with administrative privileg
4.4
MEDIUM
CVE-2016-5247
all versions
The BIOS for Lenovo ThinkCentre E93, M6500t/s, M6600, M6600q, M6600t/s, M73p, M800, M83, M8500t/s, M8600t/s, M900, M93, and M93P d
7.8
HIGH
CVE-2015-2890
<= a20
The BIOS implementation on Dell Latitude, OptiPlex, Precision Mobile Workstation, and Precision Workstation Client Solutions (CS)
6.0
MEDIUM
CVE-2008-7096
all versions
Intel Desktop and Intel Mobile Boards with BIOS firmware DQ35JO, DQ35MP, DP35DP, DG33FB, DG33BU, DG33TL, MGM965TW, D945GCPE, and D
CVE-2008-3900
all versions
Intel firmware PE94510M.86A.0050.2007.0710.1559 stores pre-boot authentication passwords in the BIOS Keyboard buffer and does not
Vulnerabilities
CISA KEV catalog
CWE weaknesses
CAPEC attack patterns
Package vulnerabilities
Threat intelligence
Threat actors
Tools & malware
ATT&CK techniques
IOCs
Detection & defense
Sigma rules
YARA rules
Atomic Red Team tests
D3FEND countermeasures
Compliance
NIST 800-53
ISO 27001:2022
SOC 2 TSC
PCI-DSS v4.0
CIS Controls v8.1
About
All capabilities
Live statistics
Data sources
Privacy policy
Terms of service
threatengine.sh · Open-source threat intelligence platform · 100+ authoritative sources · Every fact traces to its origin