CVE-2021-0189: Intel Xeon Bronze 3204 Firmware

High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days.

Use of out-of-range pointer offset in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable aescalation of privilege via local access.

Affected products

  • Intel Xeon Bronze 3204 Firmware: affected versions not specified
  • Intel Xeon Bronze 3206r Firmware: affected versions not specified
  • Intel Xeon E-2124 Firmware: affected versions not specified
  • Intel Xeon E-2124g Firmware: affected versions not specified
  • Intel Xeon E-2126g Firmware: affected versions not specified
  • Intel Xeon E-2134 Firmware: affected versions not specified
  • Intel Xeon E-2136 Firmware: affected versions not specified
  • Intel Xeon E-2144g Firmware: affected versions not specified
  • Intel Xeon E-2146g Firmware: affected versions not specified
  • Intel Xeon E-2174g Firmware: affected versions not specified
  • Intel Xeon E-2176g Firmware: affected versions not specified
  • Intel Xeon E-2176m Firmware: affected versions not specified
  • Intel Xeon E-2186g Firmware: affected versions not specified
  • Intel Xeon E-2186m Firmware: affected versions not specified
  • Intel Xeon E-2224 Firmware: affected versions not specified
  • Intel Xeon E-2224g Firmware: affected versions not specified
  • Intel Xeon E-2226g Firmware: affected versions not specified
  • Intel Xeon E-2226ge Firmware: affected versions not specified
  • Intel Xeon E-2234 Firmware: affected versions not specified
  • Intel Xeon E-2236 Firmware: affected versions not specified
  • Intel Xeon E-2244g Firmware: affected versions not specified
  • Intel Xeon E-2246g Firmware: affected versions not specified
  • Intel Xeon E-2254me Firmware: affected versions not specified
  • Intel Xeon E-2254ml Firmware: affected versions not specified
  • Intel Xeon E-2274g Firmware: affected versions not specified
  • and 143 more

Published 2022-05-12. Last modified 2026-06-17.