Intel Xeon W-10855 Firmware vulnerabilities

3 CVEs affecting Intel Xeon W-10855 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2022-26373, published 2022-08-18.

More from Intel.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2022-26373, published 2022-08-18. Medium severity, CVSS 5.5. EPSS: 0.4% chance of exploitation in the next 30 days. Non-transparent sharing of return predictor targets between contexts in some Intel(R) Processors may allow an authorized user to potentially enable information disclosure via local access.
• CVE-2022-21180, published 2022-06-15. Medium severity, CVSS 5.5. EPSS: 0.3% chance of exploitation in the next 30 days. Improper input validation for some Intel(R) Processors may allow an authenticated user to potentially cause a denial of service via local access.
• CVE-2022-0005, published 2022-05-12. Low severity, CVSS 2.4. EPSS: 0.2% chance of exploitation in the next 30 days. Sensitive information accessible by physical probing of JTAG interface for some Intel(R) Processors with SGX may allow an unprivileged user to potentially enable information disclosure via physical…