Intel UEFI Firmware vulnerabilities

5 CVEs affecting Intel UEFI Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2022-46329, published 2023-08-11.

More from Intel.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2022-36351, published 2023-08-11. Medium severity, CVSS 6.5. EPSS: 0.6% chance of exploitation in the next 30 days. Improper input validation in some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi software may allow an unauthenticated user to potentially enable denial of service via adjacent access.
• CVE-2022-46329, published 2023-08-11. Medium severity, CVSS 6.7. EPSS: 0.3% chance of exploitation in the next 30 days. Protection mechanism failure for some Intel(R) PROSet/Wireless WiFi software may allow a privileged user to potentially enable escalation of privilege via local access.
• CVE-2022-38076, published 2023-08-11. High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days. Improper input validation in some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi software may allow an authenticated user to potentially enable escalation of privilege via local access.
• CVE-2022-27635, published 2023-08-11. Medium severity, CVSS 6.7. EPSS: 0.2% chance of exploitation in the next 30 days. Improper access control for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi software may allow a privileged user to potentially enable escalation of privilege via local access.
• CVE-2022-40964, published 2023-08-11. Medium severity, CVSS 6.7. EPSS: 0.2% chance of exploitation in the next 30 days. Improper access control for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi software may allow a privileged user to potentially enable escalation of privilege via local access.