Firmware area
Intel CSME, SPS, TXE and AMT
The CVEs of the firmware in Intel's chipsets and SoCs: the CSME (earlier ME), SPS on servers, the TXE on Atom SoCs, and AMT, PTT and DAL that run in them.
- Also known as
- Management Engine, ME, Server Platform Services, Trusted Execution Engine, Active Management Technology
- Kind
- Firmware
- CVEs
- 146
- Published
- 2017–2026
Intel’s client chipsets run the Converged Security and Management Engine (CSME; Intel’s older advisories call it the Management Engine, ME), its servers run Server Platform Services (SPS) in the same place, and its Atom, Pentium and Celeron SoCs the Trusted Execution Engine (TXE). Active Management Technology (AMT) and Standard Manageability, the remote management features, Platform Trust Technology (PTT), a TPM 2.0 in firmware, and the Dynamic Application Loader (DAL) are parts of that firmware. Each advisory lists the fixed firmware versions by chipset or processor family, and the update comes from the system’s manufacturer, as part of its firmware.
INTEL-SA-00086 of 2017, the first broad review, named 1st to 8th generation Core processors, Xeon E3-1200 v5 and v6, Xeon Scalable and Xeon W, Atom C3000 and E3900, and Pentium and Celeron G, N and J processors. From 2020 on Intel’s advisories say that ME 3.x to 10.x, TXE 1.x and 2.x and SPS 1.x and 2.x get no more fixes.
Each CVE below is listed under its advisory. Intel’s advisories also fix host software: the CSME and TXE drivers and their installers, MEInfo, the Local Manageability Service, the DAL and AMT SDKs; those CVEs concern software that runs on the operating system, not the firmware, and are not listed, but the advisory that names them says so. Intel’s board products (NUC, server boards) have their own advisories, which this page does not cover.
CVEs
| CVE | Name | Vendors | Published |
|---|---|---|---|
| CVE-2017-5689 | AMT and ISM privilege escalation (described below) | Intel | 2017-05-02 |
| CVE-2017-5697 | AMT web interface clickjacking (described below) | Intel | 2017-06-14 |
| CVE-2017-5698 | AMT anti-rollback gap (described below) | Intel | 2017-09-05 |
| CVE-2017-5705 | ME kernel buffer overflows (described below) | Intel | 2017-11-21 |
| CVE-2017-5706 | SPS kernel buffer overflows (described below) | Intel | 2017-11-21 |
| CVE-2017-5707 | TXE kernel buffer overflows (described below) | Intel | 2017-11-21 |
| CVE-2017-5708 | ME kernel privilege escalations (described below) | Intel | 2017-11-21 |
| CVE-2017-5709 | SPS kernel privilege escalations (described below) | Intel | 2017-11-21 |
| CVE-2017-5710 | TXE kernel privilege escalations (described below) | Intel | 2017-11-21 |
| CVE-2017-5711 | AMT buffer overflows (described below) | Intel | 2017-11-21 |
| CVE-2017-5712 | AMT remote buffer overflow (described below) | Intel | 2017-11-21 |
| CVE-2018-3616 | AMT TLS Bleichenbacher side channel (described below) | Intel | 2018-09-12 |
| CVE-2018-3627 | CSME 11 logic bug (described below) | Intel | 2018-07-10 |
| CVE-2018-3628 | AMT HTTP handler buffer overflow (described below) | Intel | 2018-07-10 |
| CVE-2018-3629 | AMT event handler buffer overflow (described below) | Intel | 2018-07-10 |
| CVE-2018-3632 | AMT memory corruption (described below) | Intel | 2018-07-10 |
| CVE-2018-3655 | CSME, SPS and TXE subsystem flaw (described below) | Intel | 2018-09-12 |
| CVE-2018-3657 | AMT buffer overflows (described below) | Intel | 2018-09-12 |
| CVE-2018-3658 | AMT multiple memory leaks (described below) | Intel | 2018-09-12 |
| CVE-2018-3659 | PTT information disclosure (described below) | Intel | 2018-09-12 |
| CVE-2018-12147 | CSME insufficient input validation (described below) | Intel | 2019-06-13 |
| CVE-2018-12185 | AMT input validation (described below) | Intel | 2019-03-14 |
| CVE-2018-12187 | AMT insufficient input validation (described below) | Intel | 2019-03-14 |
| CVE-2018-12188 | CSME and TXE input validation (described below) | Intel | 2019-03-14 |
| CVE-2018-12189 | Content Protection unhandled exception (described below) | Intel | 2019-03-14 |
| CVE-2018-12190 | CSME insufficient input validation (described below) | Intel | 2019-03-14 |
| CVE-2018-12191 | Kernel bounds check (described below) | Intel | 2019-03-14 |
| CVE-2018-12192 | MEBx authentication bypass (described below) | Intel | 2019-03-14 |
| CVE-2018-12196 | AMT input validation (described below) | Intel | 2019-03-14 |
| CVE-2018-12198 | SPS insufficient input validation (described below) | Intel | 2019-03-14 |
| CVE-2018-12199 | CSME OS component buffer overflow (described below) | Intel | 2019-03-14 |
| CVE-2018-12208 | HECI buffer overflow (described below) | Intel | 2019-03-14 |
| CVE-2019-0089 | SPS improper data sanitization (described below) | Intel | 2019-05-17 |
| CVE-2019-0090 | CSME insufficient access control (described below) | Intel | 2019-05-17 |
| CVE-2019-0092 | AMT insufficient input validation (described below) | Intel | 2019-05-17 |
| CVE-2019-0093 | CSME insufficient data sanitization (described below) | Intel | 2019-05-17 |
| CVE-2019-0094 | AMT insufficient input validation (described below) | Intel | 2019-05-17 |
| CVE-2019-0096 | AMT out of bound write (described below) | Intel | 2019-05-17 |
| CVE-2019-0097 | AMT insufficient input validation (described below) | Intel | 2019-05-17 |
| CVE-2019-0098 | CSME logic bug (described below) | Intel | 2019-05-17 |
| CVE-2019-0099 | SPS insufficient access control (described below) | Intel | 2019-05-17 |
| CVE-2019-0131 | AMT insufficient input validation (described below) | Intel | 2019-12-18 |
| CVE-2019-0153 | CSME buffer overflow (described below) | Intel | 2019-05-17 |
| CVE-2019-0165 | CSME insufficient Input validation (described below) | Intel | 2019-12-18 |
| CVE-2019-0166 | AMT insufficient input validation (described below) | Intel | 2019-12-18 |
| CVE-2019-0168 | CSME insufficient input validation (described below) | Intel | 2019-12-18 |
| CVE-2019-0169 | CSME heap overflow (described below) | Intel | 2019-12-18 |
| CVE-2019-0170 | DAL buffer overflow (described below) | Intel | 2019-05-17 |
| CVE-2019-11086 | AMT insufficient input validation (described below) | Intel | 2019-12-18 |
| CVE-2019-11087 | CSME and TXE input validation (described below) | Intel | 2019-12-18 |
| CVE-2019-11088 | AMT insufficient input validation (described below) | Intel | 2019-12-18 |
| CVE-2019-11090 | PTT cryptographic timing conditions (described below) | Intel | 2019-12-18 |
| CVE-2019-11100 | AMT insufficient input validation (described below) | Intel | 2019-12-18 |
| CVE-2019-11101 | CSME insufficient input validation (described below) | Intel | 2019-12-18 |
| CVE-2019-11105 | CSME logic issue (described below) | Intel | 2019-12-18 |
| CVE-2019-11106 | CSME insufficient session validation (described below) | Intel | 2019-12-18 |
| CVE-2019-11107 | AMT insufficient input validation (described below) | Intel | 2019-12-18 |
| CVE-2019-11108 | CSME insufficient input validation (described below) | Intel | 2019-12-18 |
| CVE-2019-11109 | SPS logic issue (described below) | Intel | 2019-12-18 |
| CVE-2019-11110 | CSME authentication bypass (described below) | Intel | 2019-12-18 |
| CVE-2019-11131 | AMT logic issue (described below) | Intel | 2019-12-18 |
| CVE-2019-11132 | AMT cross site scripting (described below) | Intel | 2019-12-18 |
| CVE-2019-14598 | CSME improper Authentication (described below) | Intel | 2020-02-13 |
| CVE-2020-0531 | AMT improper input validation (described below) | Intel | 2020-06-15 |
| CVE-2020-0532 | AMT improper input validation (described below) | Intel | 2020-06-15 |
| CVE-2020-0533 | CSME reversible one-way hash (described below) | Intel | 2020-06-15 |
| CVE-2020-0534 | DAL improper input validation (described below) | Intel | 2020-06-15 |
| CVE-2020-0535 | AMT improper input validation (described below) | Intel | 2020-06-15 |
| CVE-2020-0536 | DAL improper input validation (described below) | Intel | 2020-06-15 |
| CVE-2020-0537 | AMT improper input validation (described below) | Intel | 2020-06-15 |
| CVE-2020-0538 | AMT improper input validation (described below) | Intel | 2020-06-15 |
| CVE-2020-0540 | AMT insufficiently protected credentials (described below) | Intel | 2020-06-15 |
| CVE-2020-0541 | CSME out-of-bounds write (described below) | Intel | 2020-06-15 |
| CVE-2020-0542 | CSME improper buffer restrictions (described below) | Intel | 2020-06-15 |
| CVE-2020-0545 | CSME integer overflow (described below) | Intel | 2020-06-15 |
| CVE-2020-0566 | TXE improper Access Control (described below) | Intel | 2020-06-15 |
| CVE-2020-0586 | SPS improper initialization (described below) | Intel | 2020-06-15 |
| CVE-2020-0594 | AMT out-of-bounds read (described below) | Intel | 2020-06-15 |
| CVE-2020-0595 | AMT use after free (described below) | Intel | 2020-06-15 |
| CVE-2020-0596 | AMT improper input validation (described below) | Intel | 2020-06-15 |
| CVE-2020-0597 | AMT out-of-bounds read (described below) | Intel | 2020-06-15 |
| CVE-2020-8674 | AMT out-of-bounds read (described below) | Intel | 2020-06-15 |
| CVE-2020-8703 | CSME improper buffer restrictions (described below) | Intel | 2021-06-09 |
| CVE-2020-8705 | Boot Guard insecure default (described below) | Intel | 2020-11-12 |
| CVE-2020-8744 | CSME improper initialization (described below) | Intel | 2020-11-12 |
| CVE-2020-8745 | CSME insufficient control flow management (described below) | Intel | 2020-11-12 |
| CVE-2020-8746 | AMT integer overflow (described below) | Intel | 2020-11-12 |
| CVE-2020-8747 | AMT out-of-bounds read (described below) | Intel | 2020-11-12 |
| CVE-2020-8749 | AMT out-of-bounds read (described below) | Intel | 2020-11-12 |
| CVE-2020-8751 | CSME insufficient control flow management (described below) | Intel | 2020-11-12 |
| CVE-2020-8752 | AMT out-of-bounds write (described below) | Intel | 2020-11-12 |
| CVE-2020-8753 | AMT out-of-bounds read (described below) | Intel | 2020-11-12 |
| CVE-2020-8754 | AMT out-of-bounds read (described below) | Intel | 2020-11-12 |
| CVE-2020-8755 | CSME race condition (described below) | Intel | 2020-11-12 |
| CVE-2020-8756 | CSME improper input validation (described below) | Intel | 2020-11-12 |
| CVE-2020-8757 | AMT out-of-bounds read (described below) | Intel | 2020-11-12 |
| CVE-2020-8758 | AMT improper buffer restrictions (described below) | Intel | 2020-09-10 |
| CVE-2020-8760 | AMT integer overflow (described below) | Intel | 2020-11-12 |
| CVE-2020-8761 | CSME inadequate encryption strength (described below) | Intel | 2020-11-12 |
| CVE-2020-12303 | DAL use after free (described below) | Intel | 2020-11-12 |
| CVE-2020-12355 | TXE RPMB replay (described below) | Intel | 2020-11-12 |
| CVE-2020-12356 | AMT out-of-bounds read (described below) | Intel | 2020-11-12 |
| CVE-2020-24506 | CSME out of bound read (described below) | Intel | 2021-06-09 |
| CVE-2020-24507 | CSME improper initialization (described below) | Intel | 2021-06-09 |
| CVE-2020-24509 | SPS insufficient control flow management (described below) | Intel | 2021-06-09 |
| CVE-2020-24516 | CSME modification of assumed-immutable data (described below) | Intel | 2021-06-09 |
| CVE-2021-0051 | SPS improper input validation (described below) | Intel | 2021-06-09 |
| CVE-2021-0060 | SPS insufficient compartmentalization (described below) | Intel | 2022-02-09 |
| CVE-2021-0147 | PMC improper locking (described below) | Intel | 2022-02-09 |
| CVE-2021-33068 | AMT null pointer dereference (described below) | Intel | 2022-02-09 |
| CVE-2021-33159 | AMT improper authentication (described below) | Intel | 2022-11-11 |
| CVE-2022-26074 | SPS incomplete cleanup (described below) | Intel | 2022-08-18 |
| CVE-2022-26845 | AMT improper authentication (described below) | Intel | 2022-11-11 |
| CVE-2022-27497 | AMT null pointer dereference (described below) | Intel | 2022-11-11 |
| CVE-2022-28697 | AMT improper access control (described below) | Intel | 2022-08-18 |
| CVE-2022-29466 | SPS improper input validation (described below) | Intel | 2022-11-11 |
| CVE-2022-29515 | SPS missing release of memory after effective lifetime (described below) | Intel | 2022-11-11 |
| CVE-2022-29893 | AMT improper authentication (described below) | Intel | 2022-11-11 |
| CVE-2022-30601 | AMT insufficiently protected credentials (described below) | Intel | 2022-08-18 |
| CVE-2022-30944 | AMT insufficiently protected credentials (described below) | Intel | 2022-08-18 |
| CVE-2022-36348 | SPS active debug code (described below) | Intel | 2023-02-16 |
| CVE-2022-36392 | AMT improper input validation (described below) | Intel | 2023-08-11 |
| CVE-2022-36794 | SPS improper condition check (described below) | Intel | 2023-02-16 |
| CVE-2022-38102 | CSME improper Input validation (described below) | Intel | 2023-08-11 |
| CVE-2023-29153 | SPS uncontrolled resource consumption (described below) | Intel | 2024-02-14 |
| CVE-2023-34424 | CSME improper input validation (described below) | Intel | 2024-08-14 |
| CVE-2023-35191 | SPS uncontrolled resource consumption (described below) | Intel | 2024-03-14 |
| CVE-2023-38655 | AMT improper buffer restrictions (described below) | Intel | 2024-08-14 |
| CVE-2023-40067 | CSME unchecked return value (described below) | Intel | 2024-08-14 |
| CVE-2023-48361 | CSME improper initialization (described below) | Intel | 2024-08-14 |
| CVE-2024-21844 | CSME integer overflow (described below) | Intel | 2024-08-14 |
| CVE-2024-25571 | SPS improper input validation (described below) | Intel | 2025-02-12 |
| CVE-2024-26021 | AMT improper initialization (described below) | Intel | 2025-02-12 |
| CVE-2024-38307 | AMT improper input validation (described below) | Intel | 2025-02-12 |
| CVE-2025-2884 | TPM reference code HMAC out-of-bounds read (described below) | Intel | 2025-06-10 |
| CVE-2025-20037 | CSME time-of-check time-of-use race condition (described below) | Intel | 2025-08-12 |
| CVE-2025-20067 | CSME observable timing discrepancy (described below) | Intel | 2025-08-12 |
| CVE-2025-20080 | AMT null pointer dereference (described below) | Intel | 2026-02-10 |
| CVE-2025-22392 | AMT out-of-bounds read (described below) | Intel | 2025-08-12 |
| CVE-2025-27708 | CSME out-of-bounds read (described below) | Intel | 2026-02-10 |
| CVE-2025-32008 | AMT out-of-bounds write (described below) | Intel | 2026-02-10 |
| CVE-2026-6726 | TPM credential for a forged key (described below) | Intel | 2026-08-11 |
| CVE-2026-6727 | TPM RSA OAEP timing side channel (described below) | Intel | 2026-08-11 |
| CVE-2026-20708 | AMT insertion of sensitive information into log file (described below) | Intel | 2026-08-11 |
| CVE-2026-20715 | AMT improper input validation (described below) | Intel | 2026-08-11 |
| CVE-2026-20734 | AMT improper initialization (described below) | Intel | 2026-08-11 |
CVEs without a page of their own
The sources give these CVEs too few facts of their own (affected processors, a mitigation, a check) for a page; this is what they say.
CVE-2017-5689: AMT and ISM privilege escalation
On provisioned AMT and Standard Manageability systems, an unprivileged network attacker could gain system privileges; a local one could provision them. INTEL-SA-00075. Source. CVE record (2017-05-02).
CVE-2017-5697: AMT web interface clickjacking
The AMT web interface did not guard against clickjacking, so a crafted web page could hijack a user's clicks in it; fixed in AMT 9.1.40 to 11.6.25. INTEL-SA-00081. Source. CVE record (2017-06-14).
CVE-2017-5698: AMT anti-rollback gap
The anti-rollback of AMT, ISM and SBT firmware 11.0.25 and 11.0.26 let a local administrator move to 11.6 firmware that still had CVE-2017-5689. INTEL-SA-00082. Source. CVE record (2017-09-05).
CVE-2017-5705: ME kernel buffer overflows
Several buffer overflows in the kernel of ME firmware 11.0 to 11.20 let an attacker with local access run code of their choosing. INTEL-SA-00086. Source. CVE record (2017-11-21).
CVE-2017-5706: SPS kernel buffer overflows
Several buffer overflows in the kernel of SPS firmware 4.0 let an attacker with local access run code of their choosing. INTEL-SA-00086. Source. CVE record (2017-11-21).
CVE-2017-5707: TXE kernel buffer overflows
Several buffer overflows in the kernel of TXE firmware 3.0 let an attacker with local access run code of their choosing. INTEL-SA-00086. Source. CVE record (2017-11-21).
CVE-2017-5708: ME kernel privilege escalations
Several privilege escalations in the kernel of ME firmware 11.0 to 11.20 let an unauthorized process reach privileged content. INTEL-SA-00086. Source. CVE record (2017-11-21).
CVE-2017-5709: SPS kernel privilege escalations
Several privilege escalations in the kernel of SPS firmware 4.0 let an unauthorized process reach privileged content. INTEL-SA-00086. Source. CVE record (2017-11-21).
CVE-2017-5710: TXE kernel privilege escalations
Several privilege escalations in the kernel of TXE firmware 3.0 let an unauthorized process reach privileged content. INTEL-SA-00086. Source. CVE record (2017-11-21).
CVE-2017-5711: AMT buffer overflows
Several buffer overflows in AMT, in ME firmware 6.x to 11.20, let an attacker with local access run code with AMT's privilege. INTEL-SA-00086. Source. CVE record (2017-11-21).
CVE-2017-5712: AMT remote buffer overflow
A buffer overflow in AMT, in ME firmware 6.x to 11.20, let an attacker with remote administrator access run code with AMT's privilege. INTEL-SA-00086. Source. CVE record (2017-11-21).
CVE-2018-3616: AMT TLS Bleichenbacher side channel
A Bleichenbacher-style side channel in the TLS code of AMT before 12.0.5 could give a network attacker the TLS session key. INTEL-SA-00141. Source. CVE record (2018-09-12).
CVE-2018-3627: CSME 11 logic bug
A logic bug in CSME 11.x could let an attacker with privileged local access run code of their choosing. INTEL-SA-00118. Source. CVE record (2018-07-10).
CVE-2018-3628: AMT HTTP handler buffer overflow
A buffer overflow in the HTTP handler of AMT, in ME firmware 3.x to 11.x, could let an attacker run code of their choosing. INTEL-SA-00112. Source. CVE record (2018-07-10).
CVE-2018-3629: AMT event handler buffer overflow
A buffer overflow in the event handler of AMT, in ME firmware 3.x to 11.x, could let an attacker cause a denial of service. INTEL-SA-00112. Source. CVE record (2018-07-10).
CVE-2018-3632: AMT memory corruption
A local administrator could corrupt memory in AMT, in ME firmware 6.x to 11.20. INTEL-SA-00112. Source. CVE record (2018-07-10).
CVE-2018-3655: CSME, SPS and TXE subsystem flaw
A flaw in a subsystem of the CSME before 11.21.55, SPS before 4.0 and TXE before 3.1.55 let an unauthenticated user with physical access modify or read data. INTEL-SA-00125. Source. CVE record (2018-09-12).
CVE-2018-3657: AMT buffer overflows
Several buffer overflows in AMT, in CSME firmware before 12.0.5, could let a privileged user with local access run code with AMT's privilege. INTEL-SA-00141. Source. CVE record (2018-09-12).
CVE-2018-3658: AMT multiple memory leaks
Multiple memory leaks in AMT (the CSME firmware): an unauthenticated user with network access could deny service. INTEL-SA-00141. Source. CVE record (2018-09-12).
CVE-2018-3659: PTT information disclosure
A flaw in the PTT module of CSME firmware before 12.0.5 and TXE firmware before 4.0 could let an unauthenticated user with physical access read data. INTEL-SA-00142. Source. CVE record (2018-09-12).
CVE-2018-12147: CSME insufficient input validation
Insufficient input validation in the HECI code of the CSME, the TXE and SPS: a privileged user with local access could escalate privilege. INTEL-SA-00125. Source. CVE record (2019-06-13).
CVE-2018-12185: AMT input validation
Insufficient input validation in AMT (the CSME firmware): an unauthenticated user with physical access could run code of their choosing. INTEL-SA-00185. Source. CVE record (2019-03-14).
CVE-2018-12187: AMT insufficient input validation
Insufficient input validation in AMT firmware: an unauthenticated user with network access could deny service. INTEL-SA-00185. Source. CVE record (2019-03-14).
CVE-2018-12188: CSME and TXE input validation
Insufficient input validation in the CSME and the TXE firmware: an unauthenticated user with physical access could modify data. INTEL-SA-00185. Source. CVE record (2019-03-14).
CVE-2018-12189: Content Protection unhandled exception
An unhandled exception in the Content Protection code of the CSME and the TXE: a privileged user with local access could modify data. INTEL-SA-00185. Source. CVE record (2019-03-14).
CVE-2018-12190: CSME insufficient input validation
Insufficient input validation in the CSME and the TXE firmware: a privileged user with local access could escalate privilege. INTEL-SA-00185. Source. CVE record (2019-03-14).
CVE-2018-12191: Kernel bounds check
A bounds check in the kernel of the CSME, the TXE and SPS firmware: an unauthenticated user with physical access could run code of their choosing. INTEL-SA-00185. Source. CVE record (2019-03-14).
CVE-2018-12192: MEBx authentication bypass
A logic bug in the kernel of the CSME and SPS firmware: an unauthenticated user with physical access could bypass the MEBx authentication. INTEL-SA-00185. Source. CVE record (2019-03-14).
CVE-2018-12196: AMT input validation
Insufficient input validation in AMT (the CSME firmware): a privileged user with local access could run code of their choosing. INTEL-SA-00185. Source. CVE record (2019-03-14).
CVE-2018-12198: SPS insufficient input validation
Insufficient input validation in SPS firmware: a privileged user with local access could deny service. INTEL-SA-00185. Source. CVE record (2019-03-14).
CVE-2018-12199: CSME OS component buffer overflow
A buffer overflow in an OS component of the CSME and the TXE firmware: a privileged user with physical access could run code of their choosing. INTEL-SA-00185. Source. CVE record (2019-03-14).
CVE-2018-12208: HECI buffer overflow
A buffer overflow in the HECI code of the CSME, the TXE and SPS firmware: an unauthenticated user with physical access could run code of their choosing. INTEL-SA-00185. Source. CVE record (2019-03-14).
CVE-2019-0089: SPS improper data sanitization
Improper data sanitization in SPS firmware: a privileged user with local access could escalate privilege. INTEL-SA-00213. Source. CVE record (2019-05-17).
CVE-2019-0090: CSME insufficient access control
Insufficient access control in the CSME, the TXE and SPS firmware: an unauthenticated user with physical access could escalate privilege. INTEL-SA-00213. Source. CVE record (2019-05-17).
CVE-2019-0092: AMT insufficient input validation
Insufficient input validation in AMT firmware: an unauthenticated user with physical access could escalate privilege. INTEL-SA-00213. Source. CVE record (2019-05-17).
CVE-2019-0093: CSME insufficient data sanitization
Insufficient data sanitization in the HECI code of the CSME and SPS: a privileged user with local access could disclose information. INTEL-SA-00213. Source. CVE record (2019-05-17).
CVE-2019-0094: AMT insufficient input validation
Insufficient input validation in AMT firmware: an unauthenticated user with adjacent access could deny service. INTEL-SA-00213. Source. CVE record (2019-05-17).
CVE-2019-0096: AMT out of bound write
Out of bound write in AMT firmware: an authenticated user with adjacent access could escalate privilege. INTEL-SA-00213. Source. CVE record (2019-05-17).
CVE-2019-0097: AMT insufficient input validation
Insufficient input validation in AMT firmware: a privileged user with network access could deny service. INTEL-SA-00213. Source. CVE record (2019-05-17).
CVE-2019-0098: CSME logic bug
Logic bug in the CSME and the TXE firmware: an unauthenticated user with physical access could escalate privilege. INTEL-SA-00213. Source. CVE record (2019-05-17).
CVE-2019-0099: SPS insufficient access control
Insufficient access control in SPS firmware: an unauthenticated user with physical access could escalate privilege. INTEL-SA-00213. Source. CVE record (2019-05-17).
CVE-2019-0131: AMT insufficient input validation
Insufficient input validation in AMT firmware: an unauthenticated user with adjacent access could deny service or disclose information. INTEL-SA-00241. Source. CVE record (2019-12-18).
CVE-2019-0153: CSME buffer overflow
Buffer overflow in the CSME firmware: an unauthenticated user with network access could escalate privilege. INTEL-SA-00213. Source. CVE record (2019-05-17).
CVE-2019-0165: CSME insufficient Input validation
Insufficient Input validation in the CSME firmware: a privileged user with local access could deny service. INTEL-SA-00241. Source. CVE record (2019-12-18).
CVE-2019-0166: AMT insufficient input validation
Insufficient input validation in AMT firmware: an unauthenticated user with network access could disclose information. INTEL-SA-00241. Source. CVE record (2019-12-18).
CVE-2019-0168: CSME insufficient input validation
Insufficient input validation in the CSME and the TXE firmware: a privileged user with local access could disclose information. INTEL-SA-00241. Source. CVE record (2019-12-18).
CVE-2019-0169: CSME heap overflow
Heap overflow in the CSME and the TXE firmware: an unauthenticated user with adjacent access could escalate privilege, deny service or disclose information. INTEL-SA-00241. Source. CVE record (2019-12-18).
CVE-2019-0170: DAL buffer overflow
Buffer overflow in the DAL firmware: a privileged user with local access could escalate privilege. INTEL-SA-00213. Source. CVE record (2019-05-17).
CVE-2019-11086: AMT insufficient input validation
Insufficient input validation in AMT firmware: an unauthenticated user with physical access could escalate privilege. INTEL-SA-00241. Source. CVE record (2019-12-18).
CVE-2019-11087: CSME and TXE input validation
Insufficient input validation in the CSME and the TXE firmware: a privileged user with local access could escalate privilege, deny service or read data. INTEL-SA-00241. Source. CVE record (2019-12-18).
CVE-2019-11088: AMT insufficient input validation
Insufficient input validation in AMT firmware: an unauthenticated user with adjacent access could escalate privilege. INTEL-SA-00241. Source. CVE record (2019-12-18).
CVE-2019-11090: PTT cryptographic timing conditions
Cryptographic timing conditions in PTT (the TXE and SPS firmware): an unauthenticated user with network access could disclose information. INTEL-SA-00241. Source. CVE record (2019-12-18).
CVE-2019-11100: AMT insufficient input validation
Insufficient input validation in AMT firmware: an unauthenticated user with physical access could disclose information. INTEL-SA-00241. Source. CVE record (2019-12-18).
CVE-2019-11101: CSME insufficient input validation
Insufficient input validation in the CSME and the TXE firmware: a privileged user with local access could disclose information. INTEL-SA-00241. Source. CVE record (2019-12-18).
CVE-2019-11105: CSME logic issue
Logic issue in the CSME firmware: a privileged user with local access could escalate privilege or disclose information. INTEL-SA-00241. Source. CVE record (2019-12-18).
CVE-2019-11106: CSME insufficient session validation
Insufficient session validation in the CSME and the TXE firmware: a privileged user with local access could escalate privilege. INTEL-SA-00241. Source. CVE record (2019-12-18).
CVE-2019-11107: AMT insufficient input validation
Insufficient input validation in AMT firmware: an unauthenticated user with network access could escalate privilege. INTEL-SA-00241. Source. CVE record (2019-12-18).
CVE-2019-11108: CSME insufficient input validation
Insufficient input validation in the CSME firmware: a privileged user with local access could escalate privilege. INTEL-SA-00241. Source. CVE record (2019-12-18).
CVE-2019-11109: SPS logic issue
Logic issue in SPS firmware: a privileged user with local access could deny service. INTEL-SA-00241. Source. CVE record (2019-12-18).
CVE-2019-11110: CSME authentication bypass
Authentication bypass in the CSME and the TXE firmware: a privileged user with local access could escalate privilege. INTEL-SA-00241. Source. CVE record (2019-12-18).
CVE-2019-11131: AMT logic issue
Logic issue in AMT firmware: an unauthenticated user with network access could escalate privilege. INTEL-SA-00241. Source. CVE record (2019-12-18).
CVE-2019-11132: AMT cross site scripting
Cross site scripting in AMT firmware: a privileged user with network access could escalate privilege. INTEL-SA-00241. Source. CVE record (2019-12-18).
CVE-2019-14598: CSME improper Authentication
Improper Authentication in the CSME firmware: a privileged user with local access could escalate privilege, deny service or disclose information. INTEL-SA-00307. Source. CVE record (2020-02-13).
CVE-2020-0531: AMT improper input validation
Improper input validation in AMT firmware: an authenticated user with network access could disclose information. INTEL-SA-00295. Source. CVE record (2020-06-15).
CVE-2020-0532: AMT improper input validation
Improper input validation in AMT firmware: an unauthenticated user with adjacent access could deny service or disclose information. INTEL-SA-00295. Source. CVE record (2020-06-15).
CVE-2020-0533: CSME reversible one-way hash
Reversible one-way hash in the CSME firmware: a privileged user with local access could escalate privilege, deny service or disclose information. INTEL-SA-00295. Source. CVE record (2020-06-15).
CVE-2020-0534: DAL improper input validation
Improper input validation in the DAL (the CSME firmware): an unauthenticated user with network access could deny service. INTEL-SA-00295. Source. CVE record (2020-06-15).
CVE-2020-0535: AMT improper input validation
Improper input validation in AMT firmware: an unauthenticated user with network access could disclose information. INTEL-SA-00295. Source. CVE record (2020-06-15).
CVE-2020-0536: DAL improper input validation
Improper input validation in the DAL (the CSME and the TXE firmware): an unauthenticated user with network access could disclose information. INTEL-SA-00295. Source. CVE record (2020-06-15).
CVE-2020-0537: AMT improper input validation
Improper input validation in AMT firmware: a privileged user with network access could deny service. INTEL-SA-00295. Source. CVE record (2020-06-15).
CVE-2020-0538: AMT improper input validation
Improper input validation in AMT firmware: an unauthenticated user with network access could deny service. INTEL-SA-00295. Source. CVE record (2020-06-15).
CVE-2020-0540: AMT insufficiently protected credentials
Insufficiently protected credentials in AMT firmware: an unauthenticated user with network access could disclose information. INTEL-SA-00295. Source. CVE record (2020-06-15).
CVE-2020-0541: CSME out-of-bounds write
Out-of-bounds write in the CSME firmware: a privileged user with local access could escalate privilege. INTEL-SA-00295. Source. CVE record (2020-06-15).
CVE-2020-0542: CSME improper buffer restrictions
Improper buffer restrictions in the CSME firmware: an authenticated user with local access could escalate privilege, deny service or disclose information. INTEL-SA-00295. Source. CVE record (2020-06-15).
CVE-2020-0545: CSME integer overflow
Integer overflow in the CSME, the TXE and SPS firmware: a privileged user with local access could deny service. INTEL-SA-00295. Source. CVE record (2020-06-15).
CVE-2020-0566: TXE improper Access Control
Improper Access Control in the TXE firmware: an unauthenticated user with physical access could escalate privilege. INTEL-SA-00295. Source. CVE record (2020-06-15).
CVE-2020-0586: SPS improper initialization
Improper initialization in SPS firmware: an authenticated user with local access could escalate privilege or deny service. INTEL-SA-00295. Source. CVE record (2020-06-15).
CVE-2020-0594: AMT out-of-bounds read
Out-of-bounds read in the IPv6 code of AMT: an unauthenticated user with network access could escalate privilege. INTEL-SA-00295. Source. CVE record (2020-06-15).
CVE-2020-0595: AMT use after free
Use after free in the IPv6 code of AMT: an unauthenticated user with network access could escalate privilege. INTEL-SA-00295. Source. CVE record (2020-06-15).
CVE-2020-0596: AMT improper input validation
Improper input validation in the DHCPv6 code of AMT: an unauthenticated user with network access could disclose information. INTEL-SA-00295. Source. CVE record (2020-06-15).
CVE-2020-0597: AMT out-of-bounds read
Out-of-bounds read in the IPv6 code of AMT: an unauthenticated user with network access could deny service. INTEL-SA-00295. Source. CVE record (2020-06-15).
CVE-2020-8674: AMT out-of-bounds read
Out-of-bounds read in the DHCPv6 code of AMT: an unauthenticated user with network access could disclose information. INTEL-SA-00295. Source. CVE record (2020-06-15).
CVE-2020-8703: CSME improper buffer restrictions
Improper buffer restrictions in the CSME firmware: a privileged user with local access could escalate privilege. INTEL-SA-00459. Source. CVE record (2021-06-09).
CVE-2020-8705: Boot Guard insecure default
An insecure default in Boot Guard, in the CSME, TXE and SPS firmware: an unauthenticated user with physical access could escalate privilege. INTEL-SA-00391. Source. CVE record (2020-11-12).
CVE-2020-8744: CSME improper initialization
Improper initialization in the CSME, the TXE and SPS firmware: a privileged user with local access could escalate privilege. INTEL-SA-00391. Source. CVE record (2020-11-12).
CVE-2020-8745: CSME insufficient control flow management
Insufficient control flow management in the CSME and the TXE firmware: an unauthenticated user with physical access could escalate privilege. INTEL-SA-00391. Source. CVE record (2020-11-12).
CVE-2020-8746: AMT integer overflow
Integer overflow in AMT firmware: an unauthenticated user with adjacent access could deny service. INTEL-SA-00391. Source. CVE record (2020-11-12).
CVE-2020-8747: AMT out-of-bounds read
Out-of-bounds read in AMT firmware: an unauthenticated user with network access could deny service or disclose information. INTEL-SA-00391. Source. CVE record (2020-11-12).
CVE-2020-8749: AMT out-of-bounds read
Out-of-bounds read in AMT firmware: an unauthenticated user with adjacent access could escalate privilege. INTEL-SA-00391. Source. CVE record (2020-11-12).
CVE-2020-8751: CSME insufficient control flow management
Insufficient control flow management in the CSME and the TXE firmware: an unauthenticated user with physical access could disclose information. INTEL-SA-00391. Source. CVE record (2020-11-12).
CVE-2020-8752: AMT out-of-bounds write
Out-of-bounds write in the IPv6 code of AMT: an unauthenticated user with network access could escalate privilege. INTEL-SA-00391. Source. CVE record (2020-11-12).
CVE-2020-8753: AMT out-of-bounds read
Out-of-bounds read in the DHCP code of AMT: an unauthenticated user with network access could disclose information. INTEL-SA-00391. Source. CVE record (2020-11-12).
CVE-2020-8754: AMT out-of-bounds read
Out-of-bounds read in AMT firmware: an unauthenticated user with network access could disclose information. INTEL-SA-00391. Source. CVE record (2020-11-12).
CVE-2020-8755: CSME race condition
Race condition in the CSME and SPS firmware: an unauthenticated user with physical access could escalate privilege. INTEL-SA-00391. Source. CVE record (2020-11-12).
CVE-2020-8756: CSME improper input validation
Improper input validation in the CSME firmware: a privileged user with local access could escalate privilege. INTEL-SA-00391. Source. CVE record (2020-11-12).
CVE-2020-8757: AMT out-of-bounds read
Out-of-bounds read in AMT firmware: a privileged user with local access could escalate privilege. INTEL-SA-00391. Source. CVE record (2020-11-12).
CVE-2020-8758: AMT improper buffer restrictions
Improper buffer restrictions in the network code of AMT: an unauthenticated user with network access could escalate privilege. INTEL-SA-00404. Source. CVE record (2020-09-10).
CVE-2020-8760: AMT integer overflow
Integer overflow in AMT firmware: a privileged user with local access could escalate privilege. INTEL-SA-00391. Source. CVE record (2020-11-12).
CVE-2020-8761: CSME inadequate encryption strength
Inadequate encryption strength in the CSME firmware: an unauthenticated user with physical access could disclose information. INTEL-SA-00391. Source. CVE record (2020-11-12).
CVE-2020-12303: DAL use after free
Use after free in the DAL (the CSME and the TXE firmware): an authenticated user with local access could escalate privilege. INTEL-SA-00391. Source. CVE record (2020-11-12).
CVE-2020-12355: TXE RPMB replay
The TXE's authentication of RPMB protocol messages could be bypassed by replaying them: an unauthenticated user with physical access could escalate privilege. INTEL-SA-00391. Source. CVE record (2020-11-12).
CVE-2020-12356: AMT out-of-bounds read
Out-of-bounds read in AMT firmware: a privileged user with local access could disclose information. INTEL-SA-00391. Source. CVE record (2020-11-12).
CVE-2020-24506: CSME out of bound read
Out of bound read in the CSME firmware: a privileged user with local access could disclose information. INTEL-SA-00459. Source. CVE record (2021-06-09).
CVE-2020-24507: CSME improper initialization
Improper initialization in the CSME firmware: a privileged user with local access could disclose information. INTEL-SA-00459. Source. CVE record (2021-06-09).
CVE-2020-24509: SPS insufficient control flow management
Insufficient control flow management in SPS firmware: a privileged user with local access could escalate privilege. INTEL-SA-00459. Source. CVE record (2021-06-09).
CVE-2020-24516: CSME modification of assumed-immutable data
Modification of assumed-immutable data in the CSME firmware: an unauthenticated user with physical access could escalate privilege. INTEL-SA-00459. Source. CVE record (2021-06-09).
CVE-2021-0051: SPS improper input validation
Improper input validation in SPS firmware: a privileged user with local access could deny service. INTEL-SA-00500. Source. CVE record (2021-06-09).
CVE-2021-0060: SPS insufficient compartmentalization
Insufficient compartmentalization in the HECI code of SPS: an authenticated user with physical access could escalate privilege. INTEL-SA-00470. Source. CVE record (2022-02-09).
CVE-2021-0147: PMC improper locking
Improper locking in the chipset PMC firmware: a privileged user with local access could deny service. INTEL-SA-00470. Source. CVE record (2022-02-09).
CVE-2021-33068: AMT null pointer dereference
Null pointer dereference in AMT firmware: an authenticated user with network access could deny service. INTEL-SA-00470. Source. CVE record (2022-02-09).
CVE-2021-33159: AMT improper authentication
Improper authentication in AMT firmware: a privileged user with local access could escalate privilege. INTEL-SA-00610. Source. CVE record (2022-11-11).
CVE-2022-26074: SPS incomplete cleanup
Incomplete cleanup in SPS firmware: a privileged user with local access could deny service. INTEL-SA-00669. Source. CVE record (2022-08-18).
CVE-2022-26845: AMT improper authentication
Improper authentication in AMT firmware: an unauthenticated user with network access could escalate privilege. INTEL-SA-00610. Source. CVE record (2022-11-11).
CVE-2022-27497: AMT null pointer dereference
Null pointer dereference in AMT firmware: an unauthenticated user with network access could deny service. INTEL-SA-00610. Source. CVE record (2022-11-11).
CVE-2022-28697: AMT improper access control
Improper access control in AMT firmware: an unauthenticated user with physical access could escalate privilege. INTEL-SA-00709. Source. CVE record (2022-08-18).
CVE-2022-29466: SPS improper input validation
Improper input validation in SPS firmware: an authenticated user with local access could deny service. INTEL-SA-00610. Source. CVE record (2022-11-11).
CVE-2022-29515: SPS missing release of memory after effective lifetime
Missing release of memory after effective lifetime in SPS firmware: a privileged user with local access could deny service. INTEL-SA-00610. Source. CVE record (2022-11-11).
CVE-2022-29893: AMT improper authentication
Improper authentication in AMT firmware: an authenticated user with network access could escalate privilege. INTEL-SA-00610. Source. CVE record (2022-11-11).
CVE-2022-30601: AMT insufficiently protected credentials
Insufficiently protected credentials in AMT firmware: an unauthenticated user with network access could escalate privilege or disclose information. INTEL-SA-00709. Source. CVE record (2022-08-18).
CVE-2022-30944: AMT insufficiently protected credentials
Insufficiently protected credentials in AMT firmware: a privileged user with local access could disclose information. INTEL-SA-00709. Source. CVE record (2022-08-18).
CVE-2022-36348: SPS active debug code
Active debug code in SPS firmware: an authenticated user with local access could escalate privilege. INTEL-SA-00718. Source. CVE record (2023-02-16).
CVE-2022-36392: AMT improper input validation
Improper input validation in AMT (the CSME firmware): an unauthenticated user with network access could deny service. INTEL-SA-00783. Source. CVE record (2023-08-11).
CVE-2022-36794: SPS improper condition check
Improper condition check in SPS firmware: a privileged user with local access could deny service. INTEL-SA-00718. Source. CVE record (2023-02-16).
CVE-2022-38102: CSME improper Input validation
Improper Input validation in the CSME firmware: a privileged user with local access could deny service. INTEL-SA-00783. Source. CVE record (2023-08-11).
CVE-2023-29153: SPS uncontrolled resource consumption
Uncontrolled resource consumption in SPS firmware: a privileged user with network access could deny service. INTEL-SA-01003. Source. CVE record (2024-02-14).
CVE-2023-34424: CSME improper input validation
Improper input validation in the CSME firmware: a privileged user with local access could deny service. INTEL-SA-00999. Source. CVE record (2024-08-14).
CVE-2023-35191: SPS uncontrolled resource consumption
Uncontrolled resource consumption in SPS firmware: a privileged user with network access could deny service. INTEL-SA-00923. Source. CVE record (2024-03-14).
CVE-2023-38655: AMT improper buffer restrictions
Improper buffer restrictions in AMT firmware: a privileged user with network access could deny service. INTEL-SA-00999. Source. CVE record (2024-08-14).
CVE-2023-40067: CSME unchecked return value
Unchecked return value in the CSME firmware: an unauthenticated user with physical access could escalate privilege. INTEL-SA-00999. Source. CVE record (2024-08-14).
CVE-2023-48361: CSME improper initialization
Improper initialization in the CSME firmware: a privileged user with local access could disclose information. INTEL-SA-00999. Source. CVE record (2024-08-14).
CVE-2024-21844: CSME integer overflow
Integer overflow in the CSME firmware: an unauthenticated user with adjacent access could deny service. INTEL-SA-00999. Source. CVE record (2024-08-14).
CVE-2024-25571: SPS improper input validation
Improper input validation in SPS firmware: a privileged user with local access could deny service. INTEL-SA-01120. Source. CVE record (2025-02-12).
CVE-2024-26021: AMT improper initialization
Improper initialization in AMT firmware: a privileged user with local access could disclose information. INTEL-SA-01152. Source. CVE record (2025-02-12).
CVE-2024-38307: AMT improper input validation
Improper input validation in AMT firmware: an authenticated user with network access could deny service. INTEL-SA-01152. Source. CVE record (2025-02-12).
CVE-2025-2884: TPM reference code HMAC out-of-bounds read
The TCG TPM 2.0 reference code did not match a signature scheme to the key's algorithm when signing, so PTT and SPS firmware could read out of bounds. INTEL-SA-01209. Source. CVE record (2025-06-10).
CVE-2025-20037: CSME time-of-check time-of-use race condition
Time-of-check time-of-use race condition in the CSME firmware: a privileged user with local access could escalate privilege. INTEL-SA-01280. Source. CVE record (2025-08-12).
CVE-2025-20067: CSME observable timing discrepancy
Observable timing discrepancy in the CSME and SPS firmware: a privileged user with local access could disclose information. INTEL-SA-01280. Source. CVE record (2025-08-12).
CVE-2025-20080: AMT null pointer dereference
Null pointer dereference in AMT firmware: an unauthenticated user with network access could deny service. INTEL-SA-01315. Source. CVE record (2026-02-10).
CVE-2025-22392: AMT out-of-bounds read
Out-of-bounds read in AMT firmware: a privileged user with network access could disclose information. INTEL-SA-01280. Source. CVE record (2025-08-12).
CVE-2025-27708: CSME out-of-bounds read
Out-of-bounds read in the CSME firmware: a privileged user with local access could disclose information. INTEL-SA-01315. Source. CVE record (2026-02-10).
CVE-2025-32008: AMT out-of-bounds write
Out-of-bounds write in AMT firmware: an unauthenticated user with network access could deny service. INTEL-SA-01315. Source. CVE record (2026-02-10).
CVE-2026-6726: TPM credential for a forged key
A leak in the TCG TPM 2.0 reference code could let a privileged local attacker get a CA credential for a forged TPM key and forge attestations. INTEL-SA-01372. Source. CVE record (2026-08-11).
CVE-2026-6727: TPM RSA OAEP timing side channel
Timing differences in the RSA OAEP decryption of the TCG TPM 2.0 reference code could let a privileged local attacker decrypt data for TPM RSA keys. INTEL-SA-01371. Source. CVE record (2026-08-11).
CVE-2026-20708: AMT insertion of sensitive information into log file
Insertion of sensitive information into log file in AMT firmware: a privileged user with network access could disclose information. INTEL-SA-01427. Source. CVE record (2026-08-11).
CVE-2026-20715: AMT improper input validation
Improper input validation in AMT firmware: an unauthenticated user with network access could deny service. INTEL-SA-01427. Source. CVE record (2026-08-11).
CVE-2026-20734: AMT improper initialization
Improper initialization in AMT firmware: a privileged user with local access could disclose information. INTEL-SA-01427. Source. CVE record (2026-08-11).
Advisories
INTEL-SA-00075: Intel Active Management Technology, Intel Small Business Technology, and Intel Standard Manageability Escalation of Privilege
2017-05-01. CVE-2017-5689
INTEL-SA-00081: Intel AMT Clickjacking Vulnerability
2017-06-05. CVE-2017-5697
INTEL-SA-00082: Intel AMT Upgradable to Vulnerable Firmware
2017-09-05. CVE-2017-5698
INTEL-SA-00086: Intel Q3'17 ME 6.x/7.x/8.x/9.x/10.x/11.x, SPS 4.0, and TXE 3.0 Security Review Cumulative Update
2017-11-20. CVE-2017-5705, CVE-2017-5706, CVE-2017-5707, CVE-2017-5708, CVE-2017-5709, CVE-2017-5710, CVE-2017-5711, CVE-2017-5712
INTEL-SA-00112: Intel Q1'18 Intel Active Management Technology 9.x/10.x/11.x Security Review Cumulative Update
2018-07-10. CVE-2018-3628, CVE-2018-3629, CVE-2018-3632
INTEL-SA-00118: Intel Converged Security Management Engine (Intel CSME) 11.x issue
2018-07-10. CVE-2018-3627
INTEL-SA-00125: Intel CSME Assets Advisory
2018-09-11. CVE-2018-12147, CVE-2018-3655
INTEL-SA-00141: Intel Active Management Technology 9.x/10.x/11.x/12.x Security Review Cumulative Update Advisory
2018-09-11. CVE-2018-3616, CVE-2018-3657, CVE-2018-3658
INTEL-SA-00142: Intel Platform Trust Technology (PTT) Update Advisory
2018-09-11. CVE-2018-3659
INTEL-SA-00185: Intel CSME, Server Platform Services, Trusted Execution Engine and Intel Active Management Technology 2018.4 QSR Advisory
2019-03-12. CVE-2018-12185, CVE-2018-12187, CVE-2018-12188, CVE-2018-12189, CVE-2018-12190, CVE-2018-12191, CVE-2018-12192, CVE-2018-12196, CVE-2018-12198, CVE-2018-12199, CVE-2018-12208
It also covers host software (installers, drivers and tools that run on the operating system), which this page leaves out: CVE-2018-12200.
INTEL-SA-00213: Intel CSME, Intel SPS, Intel TXE, Intel DAL, and Intel AMT 2019.1 QSR Advisory
2019-05-14. CVE-2019-0089, CVE-2019-0090, CVE-2019-0092, CVE-2019-0093, CVE-2019-0094, CVE-2019-0096, CVE-2019-0097, CVE-2019-0098, CVE-2019-0099, CVE-2019-0153, CVE-2019-0170
It also covers host software (installers, drivers and tools that run on the operating system), which this page leaves out: CVE-2019-0086 and CVE-2019-0091.
INTEL-SA-00241: 2019.2 IPU – Intel CSME, Intel SPS, Intel TXE, Intel AMT, Intel PTT and Intel DAL Advisory
2019-11-12. CVE-2019-0131, CVE-2019-0165, CVE-2019-0166, CVE-2019-0168, CVE-2019-0169, CVE-2019-11086, CVE-2019-11087, CVE-2019-11088, CVE-2019-11090, CVE-2019-11100, CVE-2019-11101, CVE-2019-11105, CVE-2019-11106, CVE-2019-11107, CVE-2019-11108, CVE-2019-11109, CVE-2019-11110, CVE-2019-11131, CVE-2019-11132
It also covers host software (installers, drivers and tools that run on the operating system), which this page leaves out: CVE-2019-11097, CVE-2019-11102, CVE-2019-11103, CVE-2019-11104 and CVE-2019-11147.
INTEL-SA-00295: 2020.1 IPU – Intel CSME, SPS, TXE, AMT, ISM and DAL Advisory
2020-06-09. CVE-2020-0531, CVE-2020-0532, CVE-2020-0533, CVE-2020-0534, CVE-2020-0535, CVE-2020-0536, CVE-2020-0537, CVE-2020-0538, CVE-2020-0540, CVE-2020-0541, CVE-2020-0542, CVE-2020-0545, CVE-2020-0566, CVE-2020-0586, CVE-2020-0594, CVE-2020-0595, CVE-2020-0596, CVE-2020-0597, CVE-2020-8674
Intel pairs CVE-2020-0594 and CVE-2020-0597 with CVE-2020-11899, CVE-2020-0595 with CVE-2020-11900 and CVE-2020-8674 with CVE-2020-11905, the records of the same flaws in the Treck TCP/IP stack (CERT/CC VU#257161). It also covers host software (installers, drivers and tools that run on the operating system), which this page leaves out: CVE-2020-0539.
INTEL-SA-00307: Intel CSME Advisory
2020-02-11. CVE-2019-14598
INTEL-SA-00391: 2020.2 IPU – Intel CSME, SPS, TXE, and AMT Advisory
2020-11-10. CVE-2020-12303, CVE-2020-12355, CVE-2020-12356, CVE-2020-8705, CVE-2020-8744, CVE-2020-8745, CVE-2020-8746, CVE-2020-8747, CVE-2020-8749, CVE-2020-8751, CVE-2020-8752, CVE-2020-8753, CVE-2020-8754, CVE-2020-8755, CVE-2020-8756, CVE-2020-8757, CVE-2020-8760, CVE-2020-8761
Intel pairs CVE-2020-8752 with CVE-2020-27337, CVE-2020-8753 with CVE-2020-27338 and CVE-2020-8754 with CVE-2020-27336, the records of the same flaws in the Treck TCP/IP stack (CISA ICSA-20-353-01). It also covers host software (installers, drivers and tools that run on the operating system), which this page leaves out: CVE-2020-12297, CVE-2020-12304, CVE-2020-12354 and CVE-2020-8750.
INTEL-SA-00404: Intel AMT and Intel ISM Advisory
2020-09-08. CVE-2020-8758
Intel pairs CVE-2020-8758 with CVE-2020-25066, the record of the same flaw in the Treck TCP/IP stack (CISA ICSA-20-353-01).
INTEL-SA-00459: 2021.1 IPU – Intel CSME, SPS and LMS Advisory
2021-06-08. CVE-2020-24506, CVE-2020-24507, CVE-2020-24509, CVE-2020-24516, CVE-2020-8703
It also covers host software (installers, drivers and tools that run on the operating system), which this page leaves out: CVE-2020-8704.
INTEL-SA-00470: 2021.2 IPU – Intel Chipset Firmware Advisory
2022-02-08. CVE-2021-0060, CVE-2021-0147, CVE-2021-33068
INTEL-SA-00500: Intel SPS Advisory
2021-06-08. CVE-2021-0051
INTEL-SA-00610: 2022.3 IPU - Intel Chipset Firmware Advisory
2022-11-08. CVE-2021-33159, CVE-2022-26845, CVE-2022-27497, CVE-2022-29466, CVE-2022-29515, CVE-2022-29893
INTEL-SA-00669: 2022.2 IPU - Intel Chipset Firmware Advisory
2022-08-09. CVE-2022-26074
INTEL-SA-00709: Intel AMT and Intel Standard Manageability Advisory
2022-08-09. CVE-2022-28697, CVE-2022-30601, CVE-2022-30944
INTEL-SA-00718: 2023.1 IPU - Intel Chipset Firmware Advisory
2023-02-14. CVE-2022-36348, CVE-2022-36794
INTEL-SA-00783: 2023.3 IPU - Intel Chipset Firmware Advisory
2023-08-08. CVE-2022-36392, CVE-2022-38102
It also covers host software (installers, drivers and tools that run on the operating system), which this page leaves out: CVE-2022-29871.
INTEL-SA-00923: 2024.1 IPU - Intel Chipset Software and SPS Advisory
2024-03-12. CVE-2023-35191
It also covers host software (installers, drivers and tools that run on the operating system), which this page leaves out: CVE-2023-27502, CVE-2023-28389 and CVE-2023-32633.
INTEL-SA-00999: 2024.3 IPU - Intel Chipset Firmware Advisory
2024-08-13. CVE-2023-34424, CVE-2023-38655, CVE-2023-40067, CVE-2023-48361, CVE-2024-21844
It also covers host software (installers, drivers and tools that run on the operating system), which this page leaves out: CVE-2023-35061.
INTEL-SA-01003: Intel SPS Firmware Advisory
2024-02-13. CVE-2023-29153
INTEL-SA-01120: Intel SPS Firmware Advisory
2025-02-11. CVE-2024-25571
INTEL-SA-01152: 2025.1 IPU - Intel Chipset Firmware Advisory
2025-02-11. CVE-2024-26021, CVE-2024-38307
It also covers host software (installers, drivers and tools that run on the operating system), which this page leaves out: CVE-2024-30211.
INTEL-SA-01209: Intel PTT and SPS Advisory
2025-06-10. CVE-2025-2884
INTEL-SA-01280: 2025.3 IPU, Intel Chipset Firmware Advisory
2025-08-12. CVE-2025-20037, CVE-2025-20067, CVE-2025-22392
INTEL-SA-01315: 2026.1 IPU, Intel Chipset Firmware Advisory
2026-02-10. CVE-2025-20080, CVE-2025-27708, CVE-2025-32008
INTEL-SA-01371: VRT0011, Intel Chipset Firmware Advisory
2026-08-11. CVE-2026-6727
INTEL-SA-01372: VRT0010, Intel Chipset Firmware Advisory
2026-08-11. CVE-2026-6726
INTEL-SA-01427: 2026.3 IPU, Intel Chipset Firmware Advisory
2026-08-11. CVE-2026-20708, CVE-2026-20715, CVE-2026-20734