Intel Core I7-8850h Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Intel Core I7-8850h Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (39)

• CVE-2021-0116 — CVSS 7.8 (high): Out-of-bounds write in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable an escalation of…
• CVE-2021-0117 — CVSS 7.8 (high): Pointer issues in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable an escalation of privilege…
• CVE-2019-0124 — CVSS 7.8 (high): Insufficient memory protection in Intel(R) 6th Generation Core Processors and greater, supporting TXT, may allow a privileged user to…
• CVE-2019-0155 — CVSS 7.8 (high): Insufficient access control in a subsystem for Intel (R) processor graphics in 6th, 7th, 8th and 9th Generation Intel(R) Core(TM) Processor…
• CVE-2020-0528 — CVSS 7.8 (high): Improper buffer restrictions in BIOS firmware for 7th, 8th, 9th and 10th Generation Intel(R) Core(TM) Processor families may allow an…
• CVE-2020-0529 — CVSS 7.8 (high): Improper initialization in BIOS firmware for 8th, 9th and 10th Generation Intel(R) Core(TM) Processor families may allow an unauthenticated…
• CVE-2021-33123 — CVSS 7.8 (high): Improper access control in the BIOS authenticated code module for some Intel(R) Processors may allow a privileged user to potentially…
• CVE-2021-0156 — CVSS 7.8 (high): Improper input validation in the firmware for some Intel(R) Processors may allow an authenticated user to potentially enable an escalation…
• CVE-2019-0123 — CVSS 7.8 (high): Insufficient memory protection in Intel(R) 6th Generation Core Processors and greater, supporting SGX, may allow a privileged user to…
• CVE-2020-24457 — CVSS 7.6 (high): Logic error in BIOS firmware for 8th, 9th and 10th Generation Intel(R) Core(TM) Processors may allow an unauthenticated user to potentially…
• CVE-2022-33894 — CVSS 7.5 (high): Improper input validation in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of…
• CVE-2022-44611 — CVSS 6.9 (medium): Improper input validation in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of…
• CVE-2022-0004 — CVSS 6.8 (medium): Hardware debug modes and processor INIT setting that allow override of locks for some Intel(R) Processors in Intel(R) Boot Guard and…
• CVE-2019-0151 — CVSS 6.7 (medium): Insufficient memory protection in Intel(R) TXT for certain Intel(R) Core Processors and Intel(R) Xeon(R) Processors may allow a privileged…
• CVE-2021-33124 — CVSS 6.7 (medium): Out-of-bounds write in the BIOS authenticated code module for some Intel(R) Processors may allow a privileged user to potentially enable…
• CVE-2021-0118 — CVSS 6.7 (medium): Out-of-bounds read in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable an escalation of…
• CVE-2019-11157 — CVSS 6.7 (medium): Improper conditions check in voltage settings for some Intel(R) Processors may allow a privileged user to potentially enable escalation of…
• CVE-2021-0124 — CVSS 6.6 (medium): Improper access control in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of…
• CVE-2021-0125 — CVSS 6.6 (medium): Improper initialization in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of…
• CVE-2022-40982 — CVSS 6.5 (medium): Information exposure through microarchitectural state after transient execution in certain vector execution units for some Intel(R)…
• CVE-2021-0119 — CVSS 6.2 (medium): Improper initialization in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of…
• CVE-2022-29901 — CVSS 5.6 (medium): Intel microprocessor generations 6 to 8 are affected by a new Spectre variant that is able to bypass their retpoline mitigation in the…
• CVE-2020-8695 — CVSS 5.5 (medium): Observable discrepancy in the RAPL interface for some Intel(R) Processors may allow a privileged user to potentially enable information…
• CVE-2020-8694 — CVSS 5.5 (medium): Insufficient access control in the Linux kernel driver for some Intel(R) Processors may allow an authenticated user to potentially enable…
• CVE-2020-0549 — CVSS 5.5 (medium): Cleanup errors in some data cache evictions for some Intel(R) Processors may allow an authenticated user to potentially enable information…
• CVE-2020-0548 — CVSS 5.5 (medium): Cleanup errors in some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.
• CVE-2019-14615 — CVSS 5.5 (medium): Insufficient control flow in certain data structures for some Intel(R) Processors with Intel(R) Processor Graphics may allow an…
• CVE-2019-0154 — CVSS 5.5 (medium): Insufficient access control in subsystem for Intel (R) processor graphics in 6th, 7th, 8th and 9th Generation Intel(R) Core(TM) Processor…
• CVE-2022-21151 — CVSS 5.5 (medium): Processor optimization removal or modification of security-critical code for some Intel(R) Processors may allow an authenticated user to…
• CVE-2022-21180 — CVSS 5.5 (medium): Improper input validation for some Intel(R) Processors may allow an authenticated user to potentially cause a denial of service via local…
• CVE-2019-0185 — CVSS 5.5 (medium): Insufficient access control in protected memory subsystem for SMM for 6th, 7th, 8th and 9th Generation Intel(R) Core(TM) Processor…
• CVE-2019-14607 — CVSS 5.3 (medium): Improper conditions check in multiple Intel® Processors may allow an authenticated user to potentially enable partial escalation of…
• CVE-2023-25756 — CVSS 4.6 (medium): Out-of-bounds read in the BIOS firmware for some Intel(R) Processors may allow an authenticated user to potentially enable escalation of…
• CVE-2019-0117 — CVSS 4.4 (medium): Insufficient access control in protected memory subsystem for Intel(R) SGX for 6th, 7th, 8th, 9th Generation Intel(R) Core(TM) Processor…
• CVE-2022-26047 — CVSS 4.3 (medium): Improper input validation for some Intel(R) PROSet/Wireless WiFi, Intel vPro(R) CSME WiFi and Killer(TM) WiFi products may allow…
• CVE-2022-38087 — CVSS 4.1 (medium): Exposure of resource to wrong sphere in BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable…
• CVE-2022-43505 — CVSS 4.1 (medium): Insufficient control flow management in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable…
• CVE-2023-22329 — CVSS 2.6 (low): Improper input validation in the BIOS firmware for some Intel(R) Processors may allow an authenticated user to potentially enable denial of…
• CVE-2022-0005 — CVSS 2.4 (low): Sensitive information accessible by physical probing of JTAG interface for some Intel(R) Processors with SGX may allow an unprivileged user…