Firmware area
Intel BIOS, UEFI and SMM
The CVEs of Intel's reference firmware for its processors: BIOS and UEFI code, SMM, the TXT, Boot Guard and BIOS Guard modules, and Slim Bootloader.
- Also known as
- BIOS reference code, UEFI reference firmware, TXT SINIT ACM, Boot Guard, Slim Bootloader
- Kind
- Firmware
- CVEs
- 146
- Published
- 2009–2026
Intel writes reference firmware for its processors and chipsets, and computer makers build their BIOS on it: the BIOS reference code (silicon reference and platform sample code), the UEFI firmware of Intel’s reference platforms, the authenticated code modules (ACMs) of Trusted Execution Technology (TXT), Boot Guard and BIOS Guard, the code that runs in System Management Mode (SMM), such as the SMI Transfer Monitor (STM) and PPAM, and Slim Bootloader. Intel’s advisories name the processor families concerned and advise a BIOS update from the system’s manufacturer; Slim Bootloader is fixed at a commit of its source.
The oldest CVEs here are three of TXT’s SINIT ACM, from 2009 to 2013. For the one of 2011 Intel shipped new ACMs and microcode that refuses the old ones (INTEL-SA-00030).
Intel’s board products (NUC, server boards and systems, Compute Stick) have their own BIOS and BMC advisories, which this page does not cover, and neither does it cover the open-source EDK II. SGX CVEs that Intel’s BIOS advisories also name are listed with Intel SGX.
CVEs
| CVE | Name | Vendors | Published |
|---|---|---|---|
| CVE-2009-4419 | SINIT ACM MCHBAR misconfiguration (described below) | Intel | 2009-12-24 |
| CVE-2011-5174 | SINIT ACM buffer overflow (described below) | Intel | 2012-09-15 |
| CVE-2013-5740 | SINIT ACM privilege escalation (described below) | Intel | 2013-09-12 |
| CVE-2017-5704 | Platform sample code password exposure (described below) | Intel | 2018-07-10 |
| CVE-2018-12201 | Reference firmware buffer overflow (described below) | Intel | 2019-03-14 |
| CVE-2018-12202 | Reference firmware privilege escalation (described below) | Intel | 2019-03-14 |
| CVE-2018-12203 | Reference firmware denial of service (described below) | Intel | 2019-03-14 |
| CVE-2018-12204 | Reference firmware improper memory initialization (described below) | Intel | 2019-03-14 |
| CVE-2018-12205 | Reference firmware improper certificate validation (described below) | Intel | 2019-03-14 |
| CVE-2019-0119 | System firmware buffer overflow (described below) | Intel | 2019-05-17 |
| CVE-2019-0120 | Reference firmware insufficient key protection (described below) | Intel | 2019-05-17 |
| CVE-2019-0124 | TXT memory protection (described below) | Intel | 2019-11-14 |
| CVE-2019-0126 | Reference firmware insufficient access control (described below) | Intel | 2019-05-17 |
| CVE-2019-0151 | TXT memory protection (described below) | Intel | 2019-11-14 |
| CVE-2019-0152 | SMM and TXT memory protection (described below) | Intel | 2019-11-14 |
| CVE-2019-0184 | TXT protected memory access control (described below) | Intel | 2019-11-14 |
| CVE-2019-0185 | SMM protected memory access control (described below) | Intel | 2019-11-14 |
| CVE-2019-11136 | System firmware insufficient access control (described below) | Intel | 2019-11-14 |
| CVE-2019-11137 | System firmware insufficient input validation (described below) | Intel | 2019-11-14 |
| CVE-2019-14556 | BIOS improper initialization (described below) | Intel | 2020-10-05 |
| CVE-2019-14557 | BIOS buffer overflow (described below) | Intel | 2020-10-05 |
| CVE-2019-14558 | BIOS insufficient control flow management (described below) | Intel | 2020-10-05 |
| CVE-2020-0528 | BIOS improper buffer restrictions (described below) | Intel | 2020-06-15 |
| CVE-2020-0529 | BIOS improper initialization (described below) | Intel | 2020-06-15 |
| CVE-2020-0571 | BIOS improper conditions check (described below) | Intel | 2020-10-05 |
| CVE-2020-0587 | BIOS improper conditions check (described below) | Intel | 2020-11-12 |
| CVE-2020-0588 | BIOS improper conditions check (described below) | Intel | 2020-11-12 |
| CVE-2020-0590 | BIOS improper input validation (described below) | Intel | 2020-11-12 |
| CVE-2020-0591 | BIOS improper buffer restrictions (described below) | Intel | 2020-11-12 |
| CVE-2020-0592 | BIOS out of bounds write (described below) | Intel | 2020-11-12 |
| CVE-2020-0593 | BIOS improper buffer restrictions (described below) | Intel | 2020-11-12 |
| CVE-2020-8670 | BIOS race condition (described below) | Intel | 2021-06-09 |
| CVE-2020-8671 | BIOS insufficient control flow management (described below) | Intel | 2020-10-05 |
| CVE-2020-8672 | BIOS out of bound read (described below) | Intel | 2021-02-02 |
| CVE-2020-8700 | BIOS improper input validation (described below) | Intel | 2021-06-09 |
| CVE-2020-8738 | BIOS sample code improper conditions check (described below) | Intel | 2020-11-12 |
| CVE-2020-8739 | BIOS sample code use of potentially dangerous function (described below) | Intel | 2020-11-12 |
| CVE-2020-8740 | BIOS sample code out of bounds write (described below) | Intel | 2020-11-12 |
| CVE-2020-8764 | BIOS improper access control (described below) | Intel | 2020-11-12 |
| CVE-2020-12357 | BIOS improper initialization (described below) | Intel | 2021-06-09 |
| CVE-2020-12358 | BIOS out of bounds write (described below) | Intel | 2021-06-09 |
| CVE-2020-12359 | BIOS insufficient control flow management (described below) | Intel | 2021-06-09 |
| CVE-2020-12360 | BIOS out of bounds read (described below) | Intel | 2021-06-09 |
| CVE-2020-24457 | BIOS logic error (described below) | Intel | 2020-09-14 |
| CVE-2020-24486 | BIOS improper input validation (described below) | Intel | 2021-06-09 |
| CVE-2021-0091 | BIOS improper access control (described below) | Intel | 2022-02-09 |
| CVE-2021-0092 | BIOS improper access control (described below) | Intel | 2022-02-09 |
| CVE-2021-0093 | BIOS incorrect default permissions (described below) | Intel | 2022-02-09 |
| CVE-2021-0095 | BIOS improper initialization (described below) | Intel | 2021-06-09 |
| CVE-2021-0099 | BIOS insufficient control flow management (described below) | Intel | 2022-02-09 |
| CVE-2021-0103 | BIOS insufficient control flow management (described below) | Intel | 2022-02-09 |
| CVE-2021-0107 | BIOS unchecked return value (described below) | Intel | 2022-02-09 |
| CVE-2021-0111 | BIOS NULL pointer dereference (described below) | Intel | 2022-02-09 |
| CVE-2021-0114 | BIOS unchecked return value (described below) | Intel | 2021-08-16 |
| CVE-2021-0115 | BIOS buffer overflow (described below) | Intel | 2022-02-09 |
| CVE-2021-0116 | BIOS out-of-bounds write (described below) | Intel | 2022-02-09 |
| CVE-2021-0117 | BIOS pointer issues (described below) | Intel | 2022-02-09 |
| CVE-2021-0118 | BIOS out-of-bounds read (described below) | Intel | 2022-02-09 |
| CVE-2021-0119 | BIOS improper initialization (described below) | Intel | 2022-02-09 |
| CVE-2021-0124 | BIOS improper access control (described below) | Intel | 2022-02-09 |
| CVE-2021-0125 | BIOS improper initialization (described below) | Intel | 2022-02-09 |
| CVE-2021-0144 | BSSA DFT default variable (described below) | Intel | 2021-07-14 |
| CVE-2021-0153 | BIOS out-of-bounds write (described below) | Intel | 2022-05-12 |
| CVE-2021-0154 | BIOS improper input validation (described below) | Intel | 2022-05-12 |
| CVE-2021-0155 | BIOS unchecked return value (described below) | Intel | 2022-05-12 |
| CVE-2021-0156 | BIOS improper input validation (described below) | Intel | 2022-02-09 |
| CVE-2021-0157 | BIOS insufficient control flow management (described below) | Intel | 2021-11-17 |
| CVE-2021-0158 | BIOS improper input validation (described below) | Intel | 2021-11-17 |
| CVE-2021-0159 | BIOS ACM improper input validation (described below) | Intel | 2022-05-12 |
| CVE-2021-0187 | BIOS improper access control (described below) | Intel | 2023-02-16 |
| CVE-2021-0188 | BIOS return of pointer value outside of expected range (described below) | Intel | 2022-05-12 |
| CVE-2021-0189 | BIOS use of out-of-range pointer offset (described below) | Intel | 2022-05-12 |
| CVE-2021-0190 | BIOS uncaught exception (described below) | Intel | 2022-05-12 |
| CVE-2021-33060 | BIOS out-of-bounds write (described below) | Intel | 2022-08-18 |
| CVE-2021-33103 | BIOS ACM unintended intermediary (described below) | Intel | 2022-05-12 |
| CVE-2021-33117 | 3rd generation Xeon Scalable access control (described below) | Intel | 2022-05-12 |
| CVE-2021-33122 | BIOS insufficient control flow management (described below) | Intel | 2022-05-12 |
| CVE-2021-33123 | BIOS ACM improper access control (described below) | Intel | 2022-05-12 |
| CVE-2021-33124 | BIOS ACM out-of-bounds write (described below) | Intel | 2022-05-12 |
| CVE-2022-0004 | Boot Guard and TXT lock override | Intel | 2022-05-12 |
| CVE-2022-21198 | BIOS time-of-check time-of-use race condition (described below) | Intel | 2022-11-11 |
| CVE-2022-26006 | BIOS improper input validation (described below) | Intel | 2022-11-11 |
| CVE-2022-26343 | BIOS improper access control (described below) | Intel | 2023-02-16 |
| CVE-2022-26837 | BIOS improper input validation (described below) | Intel | 2023-02-16 |
| CVE-2022-27879 | BIOS improper buffer restrictions (described below) | Intel | 2023-08-11 |
| CVE-2022-30539 | BIOS use after free (described below) | Intel | 2023-02-16 |
| CVE-2022-30704 | SINIT ACM improper initialization (described below) | Intel | 2023-02-16 |
| CVE-2022-32231 | BIOS improper initialization (described below) | Intel | 2023-02-16 |
| CVE-2022-33894 | BIOS improper input validation (described below) | Intel | 2023-05-10 |
| CVE-2022-37343 | BIOS improper access control (described below) | Intel | 2023-08-11 |
| CVE-2022-38083 | BIOS improper initialization (described below) | Intel | 2023-08-11 |
| CVE-2022-38087 | BIOS exposure of resource to wrong sphere (described below) | Intel | 2023-05-10 |
| CVE-2022-43505 | BIOS insufficient control flow management (described below) | Intel | 2023-08-11 |
| CVE-2022-44611 | BIOS improper input validation (described below) | Intel | 2023-08-11 |
| CVE-2023-22329 | BIOS improper input validation (described below) | Intel | 2023-11-14 |
| CVE-2023-22351 | UEFI out-of-bounds write (described below) | Intel | 2024-09-16 |
| CVE-2023-23904 | UEFI NULL pointer dereference (described below) | Intel | 2024-09-16 |
| CVE-2023-25546 | UEFI out-of-bounds read (described below) | Intel | 2024-09-16 |
| CVE-2023-25756 | BIOS out-of-bounds read (described below) | Intel | 2023-11-14 |
| CVE-2023-27504 | BIOS Guard improper conditions check (described below) | Intel | 2024-05-16 |
| CVE-2023-28383 | PPAM improper conditions check (described below) | Intel | 2024-05-16 |
| CVE-2023-28402 | BIOS Guard improper input validation (described below) | Intel | 2024-05-16 |
| CVE-2023-32282 | BIOS race condition (described below) | Intel | 2024-03-14 |
| CVE-2023-34440 | UEFI improper input validation (described below) | Intel | 2025-02-12 |
| CVE-2023-41833 | UEFI race condition (described below) | Intel | 2024-09-16 |
| CVE-2023-42772 | UEFI untrusted pointer dereference (described below) | Intel | 2024-09-16 |
| CVE-2023-43626 | UEFI improper access control (described below) | Intel | 2024-09-16 |
| CVE-2023-43758 | UEFI improper input validation (described below) | Intel | 2025-02-12 |
| CVE-2024-21781 | UEFI improper input validation (described below) | Intel | 2024-09-16 |
| CVE-2024-21829 | UEFI improper input validation (described below) | Intel | 2024-09-16 |
| CVE-2024-21859 | UEFI improper buffer restrictions (described below) | Intel | 2025-02-12 |
| CVE-2024-21871 | UEFI improper input validation (described below) | Intel | 2024-09-16 |
| CVE-2024-23599 | Seamless Firmware Updates race (described below) | Intel | 2024-09-16 |
| CVE-2024-24582 | XmlCli input validation (described below) | Intel | 2025-02-12 |
| CVE-2024-24853 | SMI Transfer Monitor transition order | Intel | 2024-08-14 |
| CVE-2024-25565 | UEFI insufficient control flow management (described below) | Intel | 2024-11-13 |
| CVE-2024-28047 | UEFI improper input validation (described below) | Intel | 2025-02-12 |
| CVE-2024-28127 | UEFI improper input validation (described below) | Intel | 2025-02-12 |
| CVE-2024-29214 | UEFI improper input validation (described below) | Intel | 2025-02-12 |
| CVE-2024-31155 | UEFI improper buffer restrictions (described below) | Intel | 2025-02-12 |
| CVE-2024-31157 | UEFI improper initialization (described below) | Intel | 2025-02-12 |
| CVE-2024-39279 | UEFI insufficient granularity of access control (described below) | Intel | 2025-02-12 |
| CVE-2025-20004 | ACTM control flow on Xeon 6 E-cores (described below) | Intel | 2025-05-13 |
| CVE-2025-20005 | UEFI improper buffer restrictions (described below) | Intel | 2026-03-10 |
| CVE-2025-20027 | UEFI improper input validation (described below) | Intel | 2026-03-10 |
| CVE-2025-20028 | UEFI time-of-check time-of-use race condition (described below) | Intel | 2026-03-10 |
| CVE-2025-20064 | UEFI improper input validation (described below) | Intel | 2026-03-10 |
| CVE-2025-20068 | UEFI improper input validation (described below) | Intel | 2026-03-10 |
| CVE-2025-20073 | UEFI improper buffer restrictions (described below) | Intel | 2026-03-10 |
| CVE-2025-20077 | UEFI memory not released (described below) | Intel | 2025-08-12 |
| CVE-2025-20083 | Slim Bootloader improper authentication (described below) | Intel | 2025-05-13 |
| CVE-2025-20096 | UEFI improper input validation (described below) | Intel | 2026-03-10 |
| CVE-2025-20105 | UEFI improper input validation (described below) | Intel | 2026-03-10 |
| CVE-2025-22444 | UEFI exposure of resource to wrong sphere (described below) | Intel | 2026-03-10 |
| CVE-2025-22850 | UEFI time-of-check time-of-use race condition (described below) | Intel | 2026-03-10 |
| CVE-2025-27560 | Platform firmware infinite loop (described below) | Intel | 2026-02-10 |
| CVE-2025-30185 | UEFI active debug code (described below) | Intel | 2025-11-11 |
| CVE-2025-35968 | Slim Bootloader protection failure (described below) | Intel | 2025-11-11 |
| CVE-2025-35991 | UEFI improper initialization (described below) | Intel | 2026-05-12 |
| CVE-2026-20712 | UEFI incomplete cleanup (described below) | Intel | 2026-08-11 |
| CVE-2026-20713 | Xeon firmware control flow (described below) | Intel | 2026-08-11 |
| CVE-2026-20753 | Slim Bootloader integer overflow (described below) | Intel | 2026-05-12 |
| CVE-2026-20898 | ACTM access control (described below) | Intel | 2026-08-11 |
| CVE-2026-20901 | Xeon firmware input validation (described below) | Intel | 2026-08-11 |
| CVE-2026-25194 | Slim Bootloader out-of-bounds write (described below) | Intel | 2026-08-11 |
| CVE-2026-28729 | Slim Bootloader integer overflow (described below) | Intel | 2026-08-11 |
CVEs without a page of their own
The sources give these CVEs too few facts of their own (affected processors, a mitigation, a check) for a page; this is what they say.
CVE-2009-4419: SINIT ACM MCHBAR misconfiguration
The TXT SINIT ACM of Q35, GM45, PM45, Q45 and Q43 chipsets let local software move MCHBAR so that SENTER loaded the MLE without VT-d protection. INTEL-SA-00021. Source. CVE record (2009-12-24).
CVE-2011-5174: SINIT ACM buffer overflow
A buffer overflow in TXT SINIT ACMs of chipsets from Q35 to Q67 and C20x let OS-level code bypass TXT and reach SMM; fixed by new ACMs and microcode. INTEL-SA-00030. Source. CVE record (2012-09-15).
CVE-2013-5740: SINIT ACM privilege escalation
A flaw in TXT SINIT ACMs before 1.2 for Q77, QM77, C216, Q67 and C20x chipsets let local code bypass TXT when the MLE is launched; fixed by new ACMs. INTEL-SA-00035. Source. CVE record (2013-09-12).
CVE-2017-5704: Platform sample code password exposure
Intel's platform sample firmware for 4th to 7th generation Core processors left password information in memory, open to a local administrator. INTEL-SA-00160. Source. CVE record (2018-07-10).
CVE-2018-12201: Reference firmware buffer overflow
A buffer overflow in Intel's platform sample and silicon reference firmware for 7th and 8th generation Core and Gemini Lake: a local admin could run code. INTEL-SA-00191. Source. CVE record (2019-03-14).
CVE-2018-12202: Reference firmware privilege escalation
A flaw in Intel's platform sample and silicon reference firmware let a privileged local user escalate privilege. INTEL-SA-00191. Source. CVE record (2019-03-14).
CVE-2018-12203: Reference firmware denial of service
A flaw in Intel's platform sample and silicon reference firmware let a privileged local user deny service. INTEL-SA-00191. Source. CVE record (2019-03-14).
CVE-2018-12204: Reference firmware improper memory initialization
Improper memory initialization in Intel's silicon reference firmware: a privileged local user could escalate privilege. INTEL-SA-00191. Source. CVE record (2019-03-14).
CVE-2018-12205: Reference firmware improper certificate validation
Improper certificate validation in Intel's silicon reference firmware: an unauthenticated user with physical access could escalate privilege. INTEL-SA-00191. Source. CVE record (2019-03-14).
CVE-2019-0119: System firmware buffer overflow
Buffer overflow in the system firmware: a privileged local user could escalate privilege or deny service. INTEL-SA-00223. Source. CVE record (2019-05-17).
CVE-2019-0120: Reference firmware insufficient key protection
Insufficient key protection in Intel's silicon reference firmware: a privileged local user could deny service. INTEL-SA-00223. Source. CVE record (2019-05-17).
CVE-2019-0124: TXT memory protection
Insufficient memory protection on 6th generation Core processors and later with TXT: a privileged user with local access could escalate privilege. INTEL-SA-00220. Source. CVE record (2019-11-14).
CVE-2019-0126: Reference firmware insufficient access control
Insufficient access control in Intel's silicon reference firmware: a privileged local user could escalate privilege or deny service. INTEL-SA-00223. Source. CVE record (2019-05-17).
CVE-2019-0151: TXT memory protection
Insufficient memory protection in TXT on some Core and Xeon processors: a privileged user with local access could escalate privilege. INTEL-SA-00240. Source. CVE record (2019-11-14).
CVE-2019-0152: SMM and TXT memory protection
Insufficient memory protection in SMM and TXT on some Xeon processors: a privileged user with local access could escalate privilege. INTEL-SA-00240. Source. CVE record (2019-11-14).
CVE-2019-0184: TXT protected memory access control
Weak access control on TXT protected memory of 6th to 9th generation Core and Xeon E3 v5, v6, E-2100, E-2200 with graphics: a local admin could read data. INTEL-SA-00164. Source. CVE record (2019-11-14).
CVE-2019-0185: SMM protected memory access control
Weak access control on SMM protected memory of 6th to 9th generation Core and Xeon E3 v5, v6, E-2100, E-2200 with graphics: a local admin could read data. INTEL-SA-00254. Source. CVE record (2019-11-14).
CVE-2019-11136: System firmware insufficient access control
Insufficient access control in the system firmware: a privileged local user could escalate privilege, deny service or read data. INTEL-SA-00280. Source. CVE record (2019-11-14).
CVE-2019-11137: System firmware insufficient input validation
Insufficient input validation in the system firmware: a privileged local user could escalate privilege, deny service or read data. INTEL-SA-00280. Source. CVE record (2019-11-14).
CVE-2019-14556: BIOS improper initialization
Improper initialization in the BIOS firmware: a privileged local user could deny service. INTEL-SA-00356. Source. CVE record (2020-10-05).
CVE-2019-14557: BIOS buffer overflow
Buffer overflow in the BIOS firmware: an authenticated user with adjacent access could deny service. INTEL-SA-00356. Source. CVE record (2020-10-05).
CVE-2019-14558: BIOS insufficient control flow management
Insufficient control flow management in the BIOS firmware: an authenticated user with adjacent access could deny service. INTEL-SA-00356. Source. CVE record (2020-10-05).
CVE-2020-0528: BIOS improper buffer restrictions
Improper buffer restrictions in the BIOS firmware: an authenticated local user could escalate privilege or deny service. INTEL-SA-00322. Source. CVE record (2020-06-15).
CVE-2020-0529: BIOS improper initialization
Improper initialization in the BIOS firmware: an unauthenticated local user could escalate privilege. INTEL-SA-00322. Source. CVE record (2020-06-15).
CVE-2020-0571: BIOS improper conditions check
Improper conditions check in the BIOS firmware: an authenticated local user could read data. INTEL-SA-00347. Source. CVE record (2020-10-05).
CVE-2020-0587: BIOS improper conditions check
Improper conditions check in the BIOS firmware: a privileged local user could escalate privilege. INTEL-SA-00358. Source. CVE record (2020-11-12).
CVE-2020-0588: BIOS improper conditions check
Improper conditions check in the BIOS firmware: a privileged local user could escalate privilege. INTEL-SA-00358. Source. CVE record (2020-11-12).
CVE-2020-0590: BIOS improper input validation
Improper input validation in the BIOS firmware: an authenticated local user could escalate privilege. INTEL-SA-00358. Source. CVE record (2020-11-12).
CVE-2020-0591: BIOS improper buffer restrictions
Improper buffer restrictions in the BIOS firmware: a privileged local user could escalate privilege. INTEL-SA-00358. Source. CVE record (2020-11-12).
CVE-2020-0592: BIOS out of bounds write
Out of bounds write in the BIOS firmware: an authenticated local user could escalate privilege or deny service. INTEL-SA-00358. Source. CVE record (2020-11-12).
CVE-2020-0593: BIOS improper buffer restrictions
Improper buffer restrictions in the BIOS firmware: a privileged local user could escalate privilege. INTEL-SA-00358. Source. CVE record (2020-11-12).
CVE-2020-8670: BIOS race condition
Race condition in the BIOS firmware: a privileged local user could escalate privilege. INTEL-SA-00463. Source. CVE record (2021-06-09).
CVE-2020-8671: BIOS insufficient control flow management
Insufficient control flow management in the BIOS firmware: an authenticated local user could read data. INTEL-SA-00356. Source. CVE record (2020-10-05).
CVE-2020-8672: BIOS out of bound read
Out of bound read in the BIOS firmware: an unauthenticated local user could deny service. INTEL-SA-00356. Source. CVE record (2021-02-02).
CVE-2020-8700: BIOS improper input validation
Improper input validation in the BIOS firmware: a privileged local user could escalate privilege. INTEL-SA-00463. Source. CVE record (2021-06-09).
CVE-2020-8738: BIOS sample code improper conditions check
Improper conditions check in Intel's BIOS platform sample code: a privileged local user could escalate privilege. INTEL-SA-00390. Source. CVE record (2020-11-12).
CVE-2020-8739: BIOS sample code use of potentially dangerous function
Use of potentially dangerous function in Intel's BIOS platform sample code: an authenticated local user could escalate privilege. INTEL-SA-00390. Source. CVE record (2020-11-12).
CVE-2020-8740: BIOS sample code out of bounds write
Out of bounds write in Intel's BIOS platform sample code: a privileged local user could escalate privilege. INTEL-SA-00390. Source. CVE record (2020-11-12).
CVE-2020-8764: BIOS improper access control
Improper access control in the BIOS firmware: a privileged local user could escalate privilege. INTEL-SA-00390. Source. CVE record (2020-11-12).
CVE-2020-12357: BIOS improper initialization
Improper initialization in the BIOS firmware: a privileged local user could escalate privilege. INTEL-SA-00463. Source. CVE record (2021-06-09).
CVE-2020-12358: BIOS out of bounds write
Out of bounds write in the BIOS firmware: a privileged local user could deny service. INTEL-SA-00463. Source. CVE record (2021-06-09).
CVE-2020-12359: BIOS insufficient control flow management
Insufficient control flow management in the BIOS firmware: an unauthenticated user with physical access could escalate privilege. INTEL-SA-00463. Source. CVE record (2021-06-09).
CVE-2020-12360: BIOS out of bounds read
Out of bounds read in the BIOS firmware: an authenticated local user could escalate privilege. INTEL-SA-00463. Source. CVE record (2021-06-09).
CVE-2020-24457: BIOS logic error
Logic error in the BIOS firmware: an unauthenticated user with physical access could escalate privilege, deny service or read data. INTEL-SA-00347. Source. CVE record (2020-09-14).
CVE-2020-24486: BIOS improper input validation
Improper input validation in the BIOS firmware: an authenticated local user could deny service. INTEL-SA-00463. Source. CVE record (2021-06-09).
CVE-2021-0091: BIOS improper access control
Improper access control in the BIOS firmware: an unauthenticated local user could escalate privilege. INTEL-SA-00527. Source. CVE record (2022-02-09).
CVE-2021-0092: BIOS improper access control
Improper access control in the BIOS firmware: a privileged local user could deny service. INTEL-SA-00527. Source. CVE record (2022-02-09).
CVE-2021-0093: BIOS incorrect default permissions
Incorrect default permissions in the BIOS firmware: a privileged local user could deny service. INTEL-SA-00527. Source. CVE record (2022-02-09).
CVE-2021-0095: BIOS improper initialization
Improper initialization in the BIOS firmware: a privileged local user could deny service. INTEL-SA-00463. Source. CVE record (2021-06-09).
CVE-2021-0099: BIOS insufficient control flow management
Insufficient control flow management in the BIOS firmware: an authenticated local user could escalate privilege. INTEL-SA-00527. Source. CVE record (2022-02-09).
CVE-2021-0103: BIOS insufficient control flow management
Insufficient control flow management in the BIOS firmware: a privileged local user could escalate privilege. INTEL-SA-00527. Source. CVE record (2022-02-09).
CVE-2021-0107: BIOS unchecked return value
Unchecked return value in the BIOS firmware: a privileged local user could escalate privilege. INTEL-SA-00527. Source. CVE record (2022-02-09).
CVE-2021-0111: BIOS NULL pointer dereference
NULL pointer dereference in the BIOS firmware: a privileged local user could escalate privilege. INTEL-SA-00527. Source. CVE record (2022-02-09).
CVE-2021-0114: BIOS unchecked return value
Unchecked return value in the BIOS firmware: a privileged local user could escalate privilege. INTEL-SA-00527. Source. CVE record (2021-08-16).
CVE-2021-0115: BIOS buffer overflow
Buffer overflow in the BIOS firmware: a privileged local user could escalate privilege. INTEL-SA-00527. Source. CVE record (2022-02-09).
CVE-2021-0116: BIOS out-of-bounds write
Out-of-bounds write in the BIOS firmware: a privileged local user could escalate privilege. INTEL-SA-00527. Source. CVE record (2022-02-09).
CVE-2021-0117: BIOS pointer issues
Pointer issues in the BIOS firmware: a privileged local user could escalate privilege. INTEL-SA-00527. Source. CVE record (2022-02-09).
CVE-2021-0118: BIOS out-of-bounds read
Out-of-bounds read in the BIOS firmware: a privileged local user could escalate privilege. INTEL-SA-00527. Source. CVE record (2022-02-09).
CVE-2021-0119: BIOS improper initialization
Improper initialization in the BIOS firmware: a privileged user with physical access could escalate privilege. INTEL-SA-00527. Source. CVE record (2022-02-09).
CVE-2021-0124: BIOS improper access control
Improper access control in the BIOS firmware: a privileged user with physical access could escalate privilege. INTEL-SA-00527. Source. CVE record (2022-02-09).
CVE-2021-0125: BIOS improper initialization
Improper initialization in the BIOS firmware: a privileged user with physical access could escalate privilege. INTEL-SA-00527. Source. CVE record (2022-02-09).
CVE-2021-0144: BSSA DFT default variable
An insecure default variable for the BSSA DFT feature of Intel's BIOS reference code: a privileged user with local access could escalate privilege. INTEL-SA-00527. Source. CVE record (2021-07-14).
CVE-2021-0153: BIOS out-of-bounds write
Out-of-bounds write in the BIOS firmware: a privileged local user could escalate privilege. INTEL-SA-00601. Source. CVE record (2022-05-12).
CVE-2021-0154: BIOS improper input validation
Improper input validation in the BIOS firmware: a privileged local user could escalate privilege. INTEL-SA-00601. Source. CVE record (2022-05-12).
CVE-2021-0155: BIOS unchecked return value
Unchecked return value in the BIOS firmware: a privileged local user could read data. INTEL-SA-00601. Source. CVE record (2022-05-12).
CVE-2021-0156: BIOS improper input validation
Improper input validation in the BIOS firmware: an authenticated local user could escalate privilege. INTEL-SA-00527. Source. CVE record (2022-02-09).
CVE-2021-0157: BIOS insufficient control flow management
Insufficient control flow management in the BIOS firmware: a privileged local user could escalate privilege. INTEL-SA-00562. Source. CVE record (2021-11-17).
CVE-2021-0158: BIOS improper input validation
Improper input validation in the BIOS firmware: a privileged local user could escalate privilege. INTEL-SA-00562. Source. CVE record (2021-11-17).
CVE-2021-0159: BIOS ACM improper input validation
Improper input validation in the BIOS authenticated code module: a privileged local user could escalate privilege. INTEL-SA-00601. Source. CVE record (2022-05-12).
CVE-2021-0187: BIOS improper access control
Improper access control in the BIOS firmware: a privileged local user could escalate privilege. INTEL-SA-00717. Source. CVE record (2023-02-16).
CVE-2021-0188: BIOS return of pointer value outside of expected range
Return of pointer value outside of expected range in the BIOS firmware: a privileged local user could escalate privilege. INTEL-SA-00601. Source. CVE record (2022-05-12).
CVE-2021-0189: BIOS use of out-of-range pointer offset
Use of out-of-range pointer offset in the BIOS firmware: a privileged local user could escalate privilege. INTEL-SA-00601. Source. CVE record (2022-05-12).
CVE-2021-0190: BIOS uncaught exception
Uncaught exception in the BIOS firmware: a privileged local user could escalate privilege. INTEL-SA-00601. Source. CVE record (2022-05-12).
CVE-2021-33060: BIOS out-of-bounds write
Out-of-bounds write in the BIOS firmware: an authenticated local user could escalate privilege. INTEL-SA-00686. Source. CVE record (2022-08-18).
CVE-2021-33103: BIOS ACM unintended intermediary
Unintended intermediary in the BIOS authenticated code module: a privileged local user could escalate privilege. INTEL-SA-00601. Source. CVE record (2022-05-12).
CVE-2021-33117: 3rd generation Xeon Scalable access control
Improper access control on some 3rd generation Xeon Scalable processors before BIOS MR7: a local attacker could read data. INTEL-SA-00586. Source. CVE record (2022-05-12).
CVE-2021-33122: BIOS insufficient control flow management
Insufficient control flow management in the BIOS firmware: a privileged local user could escalate privilege. INTEL-SA-00601. Source. CVE record (2022-05-12).
CVE-2021-33123: BIOS ACM improper access control
Improper access control in the BIOS authenticated code module: a privileged local user could escalate privilege. INTEL-SA-00601. Source. CVE record (2022-05-12).
CVE-2021-33124: BIOS ACM out-of-bounds write
Out-of-bounds write in the BIOS authenticated code module: a privileged local user could escalate privilege. INTEL-SA-00601. Source. CVE record (2022-05-12).
CVE-2022-21198: BIOS time-of-check time-of-use race condition
Time-of-check time-of-use race condition in the BIOS firmware: a privileged local user could escalate privilege. INTEL-SA-00688. Source. CVE record (2022-11-11).
CVE-2022-26006: BIOS improper input validation
Improper input validation in the BIOS firmware: a privileged local user could escalate privilege. INTEL-SA-00688. Source. CVE record (2022-11-11).
CVE-2022-26343: BIOS improper access control
Improper access control in the BIOS firmware: a privileged local user could escalate privilege. INTEL-SA-00717. Source. CVE record (2023-02-16).
CVE-2022-26837: BIOS improper input validation
Improper input validation in the BIOS firmware: a privileged local user could escalate privilege. INTEL-SA-00717. Source. CVE record (2023-02-16).
CVE-2022-27879: BIOS improper buffer restrictions
Improper buffer restrictions in the BIOS firmware: a privileged local user could read data. INTEL-SA-00813. Source. CVE record (2023-08-11).
CVE-2022-30539: BIOS use after free
Use after free in the BIOS firmware: a privileged local user could escalate privilege. INTEL-SA-00717. Source. CVE record (2023-02-16).
CVE-2022-30704: SINIT ACM improper initialization
Improper initialization in the TXT SINIT ACM: a privileged local user could escalate privilege. INTEL-SA-00717. Source. CVE record (2023-02-16).
CVE-2022-32231: BIOS improper initialization
Improper initialization in the BIOS firmware: a privileged local user could escalate privilege. INTEL-SA-00717. Source. CVE record (2023-02-16).
CVE-2022-33894: BIOS improper input validation
Improper input validation in the BIOS firmware: a privileged local user could escalate privilege. INTEL-SA-00807. Source. CVE record (2023-05-10).
CVE-2022-37343: BIOS improper access control
Improper access control in the BIOS firmware: a privileged local user could escalate privilege. INTEL-SA-00813. Source. CVE record (2023-08-11).
CVE-2022-38083: BIOS improper initialization
Improper initialization in the BIOS firmware: a privileged local user could read data. INTEL-SA-00813. Source. CVE record (2023-08-11).
CVE-2022-38087: BIOS exposure of resource to wrong sphere
Exposure of resource to wrong sphere in the BIOS firmware: a privileged local user could read data. INTEL-SA-00807. Source. CVE record (2023-05-10).
CVE-2022-43505: BIOS insufficient control flow management
Insufficient control flow management in the BIOS firmware: a privileged local user could deny service. INTEL-SA-00813. Source. CVE record (2023-08-11).
CVE-2022-44611: BIOS improper input validation
Improper input validation in the BIOS firmware: a privileged user with adjacent access could escalate privilege. INTEL-SA-00813. Source. CVE record (2023-08-11).
CVE-2023-22329: BIOS improper input validation
Improper input validation in the BIOS firmware: an authenticated user with adjacent access could deny service. INTEL-SA-00924. Source. CVE record (2023-11-14).
CVE-2023-22351: UEFI out-of-bounds write
Out-of-bounds write in the UEFI firmware: a privileged local user could escalate privilege. INTEL-SA-01071. Source. CVE record (2024-09-16).
CVE-2023-23904: UEFI NULL pointer dereference
NULL pointer dereference in the UEFI firmware: a privileged local user could escalate privilege. INTEL-SA-01071. Source. CVE record (2024-09-16).
CVE-2023-25546: UEFI out-of-bounds read
Out-of-bounds read in the UEFI firmware: a privileged local user could deny service. INTEL-SA-01071. Source. CVE record (2024-09-16).
CVE-2023-25756: BIOS out-of-bounds read
Out-of-bounds read in the BIOS firmware: an authenticated user with adjacent access could escalate privilege. INTEL-SA-00924. Source. CVE record (2023-11-14).
CVE-2023-27504: BIOS Guard improper conditions check
Improper conditions check in BIOS Guard firmware: a privileged local user could escalate privilege. INTEL-SA-00814. Source. CVE record (2024-05-16).
CVE-2023-28383: PPAM improper conditions check
Improper conditions check in the BIOS PPAM firmware: a privileged local user could escalate privilege. INTEL-SA-00814. Source. CVE record (2024-05-16).
CVE-2023-28402: BIOS Guard improper input validation
Improper input validation in BIOS Guard firmware: a privileged local user could escalate privilege. INTEL-SA-00814. Source. CVE record (2024-05-16).
CVE-2023-32282: BIOS race condition
Race condition in the BIOS firmware: a privileged local user could escalate privilege. INTEL-SA-00929. Source. CVE record (2024-03-14).
CVE-2023-34440: UEFI improper input validation
Improper input validation in the UEFI firmware: a privileged local user could escalate privilege. INTEL-SA-01139. Source. CVE record (2025-02-12).
CVE-2023-41833: UEFI race condition
Race condition in the UEFI firmware: a privileged local user could escalate privilege. INTEL-SA-01071. Source. CVE record (2024-09-16).
CVE-2023-42772: UEFI untrusted pointer dereference
Untrusted pointer dereference in the UEFI firmware: a privileged local user could escalate privilege. INTEL-SA-01071. Source. CVE record (2024-09-16).
CVE-2023-43626: UEFI improper access control
Improper access control in the UEFI firmware: a privileged local user could escalate privilege. INTEL-SA-01071. Source. CVE record (2024-09-16).
CVE-2023-43758: UEFI improper input validation
Improper input validation in the UEFI firmware: a privileged local user could escalate privilege. INTEL-SA-01139. Source. CVE record (2025-02-12).
CVE-2024-21781: UEFI improper input validation
Improper input validation in the UEFI firmware: a privileged local user could deny service or read data. INTEL-SA-01071. Source. CVE record (2024-09-16).
CVE-2024-21829: UEFI improper input validation
Improper input validation in the error handler of the UEFI firmware: a privileged local user could escalate privilege. INTEL-SA-01071. Source. CVE record (2024-09-16).
CVE-2024-21859: UEFI improper buffer restrictions
Improper buffer restrictions in the UEFI firmware: a privileged local user could read data. INTEL-SA-01198. Source. CVE record (2025-02-12).
CVE-2024-21871: UEFI improper input validation
Improper input validation in the UEFI firmware: a privileged local user could escalate privilege. INTEL-SA-01071. Source. CVE record (2024-09-16).
CVE-2024-23599: Seamless Firmware Updates race
A race condition in the Seamless Firmware Updates of Intel reference platforms: a privileged user with local access could deny service. INTEL-SA-01071. Source. CVE record (2024-09-16).
CVE-2024-24582: XmlCli input validation
Improper input validation in the XmlCli feature of Intel's UEFI firmware: a privileged user with local access could escalate privilege. INTEL-SA-01139. Source. CVE record (2025-02-12).
CVE-2024-25565: UEFI insufficient control flow management
Insufficient control flow management in the UEFI firmware: an authenticated local user could deny service. INTEL-SA-01085. Source. CVE record (2024-11-13).
CVE-2024-28047: UEFI improper input validation
Improper input validation in the UEFI firmware: a privileged local user could read data. INTEL-SA-01139. Source. CVE record (2025-02-12).
CVE-2024-28127: UEFI improper input validation
Improper input validation in the UEFI firmware: a privileged local user could escalate privilege. INTEL-SA-01139. Source. CVE record (2025-02-12).
CVE-2024-29214: UEFI improper input validation
Improper input validation in the CseVariableStorageSmm module of the UEFI firmware: a privileged local user could escalate privilege. INTEL-SA-01139. Source. CVE record (2025-02-12).
CVE-2024-31155: UEFI improper buffer restrictions
Improper buffer restrictions in the UEFI firmware: a privileged local user could escalate privilege. INTEL-SA-01198. Source. CVE record (2025-02-12).
CVE-2024-31157: UEFI improper initialization
Improper initialization in the OutOfBandXML module of the UEFI firmware: a privileged local user could read data. INTEL-SA-01139. Source. CVE record (2025-02-12).
CVE-2024-39279: UEFI insufficient granularity of access control
Insufficient granularity of access control in the UEFI firmware: an authenticated local user could deny service. INTEL-SA-01139. Source. CVE record (2025-02-12).
CVE-2025-20004: ACTM control flow on Xeon 6 E-cores
Insufficient control flow management in the Alias Checking Trusted Module of Xeon 6 processors with E-cores: a privileged local user could escalate privilege. INTEL-SA-01273. Source. CVE record (2025-05-13).
CVE-2025-20005: UEFI improper buffer restrictions
Improper buffer restrictions in Intel's UEFI reference firmware: a privileged local user could escalate privilege. INTEL-SA-01234. Source. CVE record (2026-03-10).
CVE-2025-20027: UEFI improper input validation
Improper input validation in the WheaERST module of Intel's UEFI reference firmware: a privileged local user could escalate privilege. INTEL-SA-01234. Source. CVE record (2026-03-10).
CVE-2025-20028: UEFI time-of-check time-of-use race condition
Time-of-check time-of-use race condition in the WheaERST module of Intel's UEFI reference firmware: a privileged local user could escalate privilege. INTEL-SA-01234. Source. CVE record (2026-03-10).
CVE-2025-20064: UEFI improper input validation
Improper input validation in the FlashUcAcmSmm module of Intel's UEFI reference firmware: a privileged local user could escalate privilege. INTEL-SA-01234. Source. CVE record (2026-03-10).
CVE-2025-20068: UEFI improper input validation
Improper input validation in the ImcErrorHandler module of Intel's UEFI reference firmware: a privileged local user could escalate privilege. INTEL-SA-01234. Source. CVE record (2026-03-10).
CVE-2025-20073: UEFI improper buffer restrictions
Improper buffer restrictions in Intel's UEFI reference firmware: a privileged local user could read data. INTEL-SA-01234. Source. CVE record (2026-03-10).
CVE-2025-20077: UEFI memory not released
Memory not released after use in the OobRasMmbiHandlerDriver module of Intel's UEFI reference firmware: a privileged local user could deny service. INTEL-SA-01300. Source. CVE record (2025-08-12).
CVE-2025-20083: Slim Bootloader improper authentication
Improper authentication in Slim Bootloader: a privileged local user could escalate privilege. INTEL-SA-01290. Source. CVE record (2025-05-13).
CVE-2025-20096: UEFI improper input validation
Improper input validation in Intel's UEFI reference firmware: a privileged local user could escalate privilege. INTEL-SA-01393. Source. CVE record (2026-03-10).
CVE-2025-20105: UEFI improper input validation
Improper input validation in an SMM module of Intel's UEFI reference firmware: a privileged local user could escalate privilege. INTEL-SA-01234. Source. CVE record (2026-03-10).
CVE-2025-22444: UEFI exposure of resource to wrong sphere
Exposure of resource to wrong sphere in the PdaSmm module of Intel's UEFI reference firmware: a privileged local user could read data. INTEL-SA-01234. Source. CVE record (2026-03-10).
CVE-2025-22850: UEFI time-of-check time-of-use race condition
Time-of-check time-of-use race condition in the PdaSmm module of Intel's UEFI reference firmware: a privileged local user could read data. INTEL-SA-01234. Source. CVE record (2026-03-10).
CVE-2025-27560: Platform firmware infinite loop
A loop that cannot exit in the firmware of some Intel platforms: privileged system software could deny service. INTEL-SA-01401. Source. CVE record (2026-02-10).
CVE-2025-30185: UEFI active debug code
Debug code left active in Intel's UEFI reference firmware: privileged system software could alter data, escalate privilege or deny service. INTEL-SA-01378. Source. CVE record (2025-11-11).
CVE-2025-35968: Slim Bootloader protection failure
A protection mechanism failure in Slim Bootloader: privileged startup or SMM code could escalate privilege. INTEL-SA-01395. Source. CVE record (2025-11-11).
CVE-2025-35991: UEFI improper initialization
Improper initialization in Intel's UEFI reference firmware: a privileged local user could read data. INTEL-SA-01413. Source. CVE record (2026-05-12).
CVE-2026-20712: UEFI incomplete cleanup
Incomplete cleanup in Intel's UEFI reference firmware: a privileged local user could read data. INTEL-SA-01437. Source. CVE record (2026-08-11).
CVE-2026-20713: Xeon firmware control flow
Control flow that is always wrong in firmware of some Xeon processors: privileged system software could escalate privilege. INTEL-SA-01442. Source. CVE record (2026-08-11).
CVE-2026-20753: Slim Bootloader integer overflow
Integer overflow in Slim Bootloader: a privileged local user could escalate privilege. INTEL-SA-01425. Source. CVE record (2026-05-12).
CVE-2026-20898: ACTM access control
Improper access control in the Alias Checking Trusted Module of some Xeon processors: privileged startup or SMM code could escalate privilege. INTEL-SA-01439. Source. CVE record (2026-08-11).
CVE-2026-20901: Xeon firmware input validation
Improper input validation in firmware of some Xeon processors: privileged startup or SMM code could alter data. INTEL-SA-01442. Source. CVE record (2026-08-11).
CVE-2026-25194: Slim Bootloader out-of-bounds write
Out-of-bounds write in Slim Bootloader: a privileged local user could deny service. INTEL-SA-01475. Source. CVE record (2026-08-11).
CVE-2026-28729: Slim Bootloader integer overflow
Integer overflow in Slim Bootloader: an authenticated local user could deny service or read data. INTEL-SA-01475. Source. CVE record (2026-08-11).
Advisories
INTEL-SA-00021: SINIT misconfiguration allows for Privilege Escalation
2009-12-21. CVE-2009-4419
INTEL-SA-00030: SINIT Buffer Overflow Vulnerability
2011-12-05. CVE-2011-5174
INTEL-SA-00035: SINIT Authenticated Code Module Privilege Escalation
2013-07-01. CVE-2013-5740
INTEL-SA-00160: Insecure Handling of BIOS and AMT Passwords
2018-07-10. CVE-2017-5704
INTEL-SA-00164: 2019.2 IPU – Intel TXT Advisory
2019-11-12. CVE-2019-0184
INTEL-SA-00191: Intel Firmware 2018.4 QSR Advisory
2019-03-12. CVE-2018-12201, CVE-2018-12202, CVE-2018-12203, CVE-2018-12204, CVE-2018-12205
INTEL-SA-00220: 2019.2 IPU – Intel SGX and TXT Advisory
2019-11-12. CVE-2019-0123, CVE-2019-0124
CVE-2019-0123 is on the Intel SGX page.
INTEL-SA-00223: 2019.1 QSR UEFI Advisory
2019-05-14. CVE-2019-0119, CVE-2019-0120, CVE-2019-0126
INTEL-SA-00240: 2019.2 IPU – Intel Processor Security Advisory
2019-11-12. CVE-2019-0151, CVE-2019-0152
INTEL-SA-00254: 2019.2 IPU – Intel Processor Graphics SMM Advisory
2019-11-12. CVE-2019-0185
INTEL-SA-00280: 2019.2 IPU – UEFI Advisory
2019-11-12. CVE-2019-11136, CVE-2019-11137
INTEL-SA-00322: 2020.1 IPU - BIOS Advisory
2020-06-09. CVE-2020-0528, CVE-2020-0529
INTEL-SA-00347: Intel BIOS Advisory
2020-09-08. CVE-2020-0571, CVE-2020-24457
INTEL-SA-00356: Intel BIOS Advisory
2020-09-08. CVE-2019-14556, CVE-2019-14557, CVE-2019-14558, CVE-2020-8671, CVE-2020-8672
INTEL-SA-00358: 2020.2 IPU – BIOS Advisory
2020-11-10. CVE-2020-0587, CVE-2020-0588, CVE-2020-0590, CVE-2020-0591, CVE-2020-0592, CVE-2020-0593
INTEL-SA-00390: Intel BIOS Platform Sample Code Advisory
2020-11-10. CVE-2020-8738, CVE-2020-8739, CVE-2020-8740, CVE-2020-8764
INTEL-SA-00463: 2021.1 IPU – BIOS Advisory
2021-06-08. CVE-2020-12357, CVE-2020-12358, CVE-2020-12359, CVE-2020-12360, CVE-2020-24486, CVE-2020-8670, CVE-2020-8700, CVE-2021-0095
INTEL-SA-00527: 2021.2 IPU – BIOS Advisory
2022-02-08. CVE-2021-0091, CVE-2021-0092, CVE-2021-0093, CVE-2021-0099, CVE-2021-0103, CVE-2021-0107, CVE-2021-0111, CVE-2021-0114, CVE-2021-0115, CVE-2021-0116, CVE-2021-0117, CVE-2021-0118, CVE-2021-0119, CVE-2021-0124, CVE-2021-0125, CVE-2021-0144, CVE-2021-0156
INTEL-SA-00562: BIOS Reference Code Advisory
2021-11-09. CVE-2021-0157, CVE-2021-0158
INTEL-SA-00586: 3rd Generation Intel Xeon Scalable Processors Advisory
2022-05-10. CVE-2021-33117
INTEL-SA-00601: 2022.1 IPU – BIOS Advisory
2022-05-10. CVE-2021-0153, CVE-2021-0154, CVE-2021-0155, CVE-2021-0159, CVE-2021-0188, CVE-2021-0189, CVE-2021-0190, CVE-2021-33103, CVE-2021-33122, CVE-2021-33123, CVE-2021-33124
It also covers host software, which this page leaves out: CVE-2021-33107 (the AMT SDK and tools).
INTEL-SA-00613: 2022.1 IPU - Intel Boot Guard and Intel TXT Advisory
2022-05-10. CVE-2022-0004
INTEL-SA-00686: 2022.2 IPU – BIOS Advisory
2022-08-09. CVE-2021-33060
INTEL-SA-00688: 2022.3 IPU – BIOS Advisory
2022-11-08. CVE-2022-21198, CVE-2022-26006
INTEL-SA-00717: 2023.1 IPU - BIOS Advisory
2023-02-14. CVE-2021-0187, CVE-2022-26343, CVE-2022-26837, CVE-2022-30539, CVE-2022-30704, CVE-2022-32231
INTEL-SA-00807: 2023.2 IPU – BIOS Advisory
2023-05-09. CVE-2022-33894, CVE-2022-38087
INTEL-SA-00813: 2023.3 IPU - BIOS Advisory
2023-08-08. CVE-2022-27879, CVE-2022-37343, CVE-2022-38083, CVE-2022-43505, CVE-2022-44611
INTEL-SA-00814: Intel BIOS Guard and PPAM Firmware Advisory
2024-05-14. CVE-2023-27504, CVE-2023-28383, CVE-2023-28402
INTEL-SA-00924: 2023.4 IPU - BIOS Advisory
2023-11-14. CVE-2023-22329, CVE-2023-25756
INTEL-SA-00929: 2024.1 IPU - BIOS Advisory
2024-03-12. CVE-2023-32282
INTEL-SA-01071: 2024.3 IPU - UEFI Firmware Advisory
2024-09-10. CVE-2023-22351, CVE-2023-23904, CVE-2023-25546, CVE-2023-41833, CVE-2023-42772, CVE-2023-43626, CVE-2023-43753, CVE-2024-21781, CVE-2024-21829, CVE-2024-21871, CVE-2024-23599
CVE-2023-43753 is on the Intel SGX page.
INTEL-SA-01083: 2024.3 IPU - SMI Transfer Monitor Advisory
2024-08-13. CVE-2024-24853
INTEL-SA-01085: Intel UEFI Firmware Advisory
2024-11-12. CVE-2024-25565
INTEL-SA-01139: 2025.1 IPU - UEFI Firmware Advisory
2025-02-11. CVE-2023-34440, CVE-2023-43758, CVE-2024-24582, CVE-2024-28047, CVE-2024-28127, CVE-2024-29214, CVE-2024-31157, CVE-2024-39279
INTEL-SA-01198: UEFI Firmware Advisory
2025-02-11. CVE-2024-21859, CVE-2024-31155
INTEL-SA-01234: 2025.3 IPU, UEFI Reference Firmware Advisory
2026-03-10. CVE-2025-20005, CVE-2025-20027, CVE-2025-20028, CVE-2025-20064, CVE-2025-20068, CVE-2025-20073, CVE-2025-20105, CVE-2025-22444, CVE-2025-22850
INTEL-SA-01273: Intel Xeon 6 processor E-Cores with Alias Checking Trusted Module Advisory
2025-05-13. CVE-2025-20004
INTEL-SA-01290: Intel Slim Bootloader Advisory
2025-05-13. CVE-2025-20083
INTEL-SA-01300: Intel UEFI Reference Server Firmware Advisory
2025-08-12. CVE-2025-20077
INTEL-SA-01313: 2025.3 IPU, Intel Xeon Processor Firmware Advisory
2025-08-12. CVE-2025-24305
CVE-2025-24305 is on the Intel SGX page.
INTEL-SA-01378: Intel UEFI Server Firmware Advisory
2025-11-11. CVE-2025-30185
INTEL-SA-01393: 2026.1 IPU, UEFI Reference Firmware Advisory
2026-03-10. CVE-2025-20096
INTEL-SA-01395: Intel Slim Bootloader Advisory
2025-11-11. CVE-2025-35968
INTEL-SA-01396: 2026.1 IPU, Intel Processor Firmware Advisory
2026-02-10. CVE-2025-31648
CVE-2025-31648 is on the Intel processor errata page.
INTEL-SA-01401: Intel Server Firmware Advisory
2026-02-10. CVE-2025-27560
INTEL-SA-01413: UEFI Reference Firmware Advisory
2026-05-12. CVE-2025-35991
INTEL-SA-01425: Intel Slim Bootloader Advisory
2026-05-12. CVE-2026-20753
INTEL-SA-01437: 2026.3 IPU, Intel UEFI Firmware Advisory
2026-08-11. CVE-2026-20712
INTEL-SA-01439: Intel Xeon processor with Alias Checking Trusted Module Advisory
2026-08-11. CVE-2026-20898
INTEL-SA-01442: 2026.3 IPU, Intel Xeon Processor Firmware Advisory
2026-08-11. CVE-2026-20713, CVE-2026-20901
INTEL-SA-01475: Intel Slim Bootloader Advisory
2026-08-11. CVE-2026-25194, CVE-2026-28729