Intel Core i9-10850h Firmware vulnerabilities

6 CVEs affecting Intel Core i9-10850h Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2022-26047, published 2022-11-11.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2022-26047, published 2022-11-11. Medium severity, CVSS 6.5. EPSS: 0.4% chance of exploitation in the next 30 days. Improper input validation for some Intel(R) PROSet/Wireless WiFi, Intel vPro(R) CSME WiFi and Killer(TM) WiFi products may allow unauthenticated user to potentially enable denial of service via local…
CVE-2022-26373, published 2022-08-18. Medium severity, CVSS 5.5. EPSS: 0.4% chance of exploitation in the next 30 days. Non-transparent sharing of return predictor targets between contexts in some Intel(R) Processors may allow an authorized user to potentially enable information disclosure via local access.
CVE-2022-21180, published 2022-06-15. Medium severity, CVSS 5.5. EPSS: 0.3% chance of exploitation in the next 30 days. Improper input validation for some Intel(R) Processors may allow an authenticated user to potentially cause a denial of service via local access.
CVE-2022-0004, published 2022-05-12. Medium severity, CVSS 6.8. EPSS: 0.3% chance of exploitation in the next 30 days. Hardware debug modes and processor INIT setting that allow override of locks for some Intel(R) Processors in Intel(R) Boot Guard and Intel(R) TXT may allow an unauthenticated user to potentially…
CVE-2021-33107, published 2022-02-09. Medium severity, CVSS 4.6. EPSS: 0.3% chance of exploitation in the next 30 days. Insufficiently protected credentials in USB provisioning for Intel(R) AMT SDK before version 16.0.3, Intel(R) SCS before version 12.2 and Intel(R) MEBx before versions 11.0.0.0012, 12.0.0.0011,…
CVE-2022-0005, published 2022-05-12. Low severity, CVSS 2.4. EPSS: 0.2% chance of exploitation in the next 30 days. Sensitive information accessible by physical probing of JTAG interface for some Intel(R) Processors with SGX may allow an unprivileged user to potentially enable information disclosure via physical…