CVE-2022-26373Medium· 5.5▾ SunlitNon-transparent sharing of return predictor targets between contexts in some Intel(R) Processors may allow an authorized user to potentially enable information disclosure via local access.
▾ Sunlit zone — Low / medium · no exploitation signal
impact 30.3 · likelihood 0.1 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
0.4%
Non-transparent sharing of return predictor targets between contexts in some Intel(R) Processors may allow an authorized user to potentially enable information disclosure via local access.
xeon_platinum_8253_firmwarexeon_platinum_8256_firmwarexeon_platinum_8260_firmwarexeon_platinum_8260l_firmwarexeon_platinum_8260m_firmwarexeon_platinum_8260y_firmwarexeon_platinum_8268_firmwarexeon_platinum_8270_firmwarexeon_platinum_8276_firmwarexeon_platinum_8276l_firmwarexeon_platinum_8276m_firmwarexeon_platinum_8280_firmwarexeon_platinum_8280l_firmwarexeon_platinum_8280m_firmwarexeon_platinum_9220_firmwarexeon_platinum_9221_firmwarexeon_platinum_9222_firmwarexeon_platinum_9242_firmwarexeon_platinum_9282_firmwarexeon_gold_5215_firmwarexeon_gold_5215l_firmwarexeon_gold_5215m_firmwarexeon_gold_5217_firmwarexeon_gold_5218_firmwarexeon_gold_5218b_firmwarexeon_gold_5218n_firmwarexeon_gold_5218r_firmwarexeon_gold_5218t_firmwarexeon_gold_5220_firmwarexeon_gold_5220r_firmwarexeon_gold_5220s_firmwarexeon_gold_5220t_firmwarexeon_gold_5222_firmwarexeon_gold_6208u_firmwarexeon_gold_6209u_firmwarexeon_gold_6210u_firmwarexeon_gold_6212u_firmwarexeon_gold_6222v_firmwarexeon_gold_6226_firmwarexeon_gold_6226r_firmwarexeon_gold_6230_firmwarexeon_gold_6230n_firmwarexeon_gold_6230r_firmwarexeon_gold_6230t_firmwarexeon_gold_6234_firmwarexeon_gold_6238_firmwarexeon_gold_6238l_firmwarexeon_gold_6238m_firmwarexeon_gold_6238r_firmwarexeon_gold_6238t_firmwarexeon_gold_6240_firmwarexeon_gold_6240l_firmwarexeon_gold_6240m_firmwarexeon_gold_6240r_firmwarexeon_gold_6240y_firmwarexeon_gold_6242_firmwarexeon_gold_6242r_firmwarexeon_gold_6244_firmwarexeon_gold_6246_firmwarexeon_gold_6248_firmwarexeon_gold_6258r_firmwarexeon_gold_6250_firmwarexeon_gold_6250l_firmwarexeon_gold_6252_firmwarexeon_gold_6252n_firmwarexeon_gold_6254_firmwarexeon_gold_6256_firmwarexeon_gold_6262v_firmwarexeon_silver_4208_firmwarexeon_silver_4209t_firmwarexeon_silver_4210_firmwarexeon_silver_4210r_firmwarexeon_silver_4210t_firmwarexeon_silver_4214_firmwarexeon_silver_4214c_firmwarexeon_silver_4214r_firmwarexeon_silver_4214y_firmwarexeon_silver_4215_firmwarexeon_silver_4215r_firmwarexeon_silver_4216_firmwarexeon_bronze_3204_firmwarexeon_bronze_3206r_firmwarexeon_w-3275m_firmwarexeon_w-3275_firmwarexeon_w-3265m_firmwarexeon_w-3265_firmwarexeon_w-3245m_firmwarexeon_w-3245_firmwarexeon_w-3235_firmwarexeon_w-3225_firmwarexeon_w-3223_firmwarexeon_w-2295_firmwarexeon_w-2275_firmwarexeon_w-2265_firmwarexeon_w-2255_firmwarexeon_w-2245_firmwarexeon_w-2235_firmwarexeon_w-2225_firmwarexeon_w-2223_firmwarecore_i9-10940x_firmwareRefer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2022-21166Medium· 5.5Incomplete cleanup in specific special register write operations for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.
CVE-2022-21125Medium· 5.5Incomplete cleanup of microarchitectural fill buffers on some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.
CVE-2022-21123Medium· 5.5Incomplete cleanup of multi-core shared buffers for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.
CVE-2019-11136Medium· 6.7Insufficient access control in system firmware for Intel(R) Xeon(R) Scalable Processors, 2nd Generation Intel(R) Xeon(R) Scalable Processors and Intel(R) Xeon(R) Processors D Family may allow a privileged user to potentially enable escal…
CVE-2019-11137High· 8.2Insufficient input validation in system firmware for Intel(R) Xeon(R) Scalable Processors, Intel(R) Xeon(R) Processors D Family, Intel(R) Xeon(R) Processors E5 v4 Family, Intel(R) Xeon(R) Processors E7 v4 Family and Intel(R) Atom(R) proc…
CVE-2013-4786High· 7.5The IPMI 2.0 specification supports RMCP+ Authenticated Key-Exchange Protocol (RAKP) authentication, which allows remote attackers to obtain password hashes and conduct offline password guessing attacks by obtaining the HMAC from a RAKP …