Intel Microcode vulnerabilities

6 CVEs affecting Intel Microcode, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-23908, published 2023-08-11.

More from Intel.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2022-40982, published 2023-08-11. Medium severity, CVSS 6.5. EPSS: 3% chance of exploitation in the next 30 days. Information exposure through microarchitectural state after transient execution in certain vector execution units for some Intel(R) Processors may allow an authenticated user to potentially enable…
• CVE-2020-8698, published 2020-11-12. Medium severity, CVSS 5.5. EPSS: 0.5% chance of exploitation in the next 30 days. Improper isolation of shared resources in some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.
• CVE-2020-8696, published 2020-11-12. Medium severity, CVSS 5.5. EPSS: 0.4% chance of exploitation in the next 30 days. Improper removal of sensitive information before storage or transfer in some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.
• CVE-2020-24511, published 2021-06-09. Medium severity, CVSS 6.5. EPSS: 0.4% chance of exploitation in the next 30 days. Improper isolation of shared resources in some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.
• CVE-2020-24512, published 2021-06-09. Low severity, CVSS 3.3. EPSS: 0.4% chance of exploitation in the next 30 days. Observable timing discrepancy in some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.
• CVE-2023-23908, published 2023-08-11. Medium severity, CVSS 4.4. EPSS: 0.3% chance of exploitation in the next 30 days. Improper access control in some 3rd Generation Intel(R) Xeon(R) Scalable processors may allow a privileged user to potentially enable information disclosure via local access.