WaratekVRT Sign in
Reset
More filters (1)
Columns
Including CVEs outside Waratek scope✕Product core m3✕
Overview 48 matches · 0 in Waratek scope · 0 protected · 1 exploited · 0 CISA KEV · 4 public PoC · 3 EPSS ≥ 0.5
48matches 0in Waratek scope0.0% 0protected0.0% 1exploited2.1% 0CISA KEV0.0% 4public PoC8.3% 3EPSS ≥ 0.56.2%
Protected by Waratek 0 0.0% Rule in development 0 0.0% Mitigation candidate 0 0.0% No exploit published 0 0.0% Outside Waratek scope 3 6.2% Not applicable 45 93.8% Withdrawn CVE 0 0.0%
Critical 0 0.0% High 10 20.8% Medium 37 77.1% Low 1 2.1% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 0 0.0% partly blocked 0 0.0% not blocked 48 100.0% not established 0 0.0% unrecorded 0 0.0%
Exploited 1 2.1% Working exploit published 1 2.1% Proof of concept only 2 4.2% Forecast only 0 0.0% No public exploit 44 91.7%
split by peak 17 / quarter
Not applicable: 45Outside Waratek scope: 3 Low: 1Medium: 37High: 10 not blocked: 48 No public exploit: 44Proof of concept only: 2Working exploit published: 1Exploited: 1
Q1 184 Outside Waratek scope2 Not applicable2 Medium4 not blocked4 Exploited1 Working exploit published1 Proof of concept only1 No public exploit1 Q2 181 Not applicable1 Medium1 not blocked1 No public exploit1 Q3 184 Not applicable4 Medium4 not blocked4 No public exploit4 Q4 180 Q1 190 Q2 190 Q3 190 Q4 193 Not applicable3 High1 Medium2 not blocked3 No public exploit3 Q1 203 Not applicable3 Medium3 not blocked3 Proof of concept only1 No public exploit2 Q2 201 Outside Waratek scope1 Medium1 not blocked1 No public exploit1 Q3 200 Q4 202 Not applicable2 Medium2 not blocked2 No public exploit2 Q1 210 Q2 210 Q3 210 Q4 210 Q1 2217 Not applicable17 High5 Medium12 not blocked17 No public exploit17 Q2 224 Not applicable4 High1 Medium3 not blocked4 No public exploit4 Q3 222 Not applicable2 Medium2 not blocked2 No public exploit2 Q4 220 Q1 230 Q2 232 Not applicable2 High1 Medium1 not blocked2 No public exploit2 Q3 233 Not applicable3 High1 Medium2 not blocked3 No public exploit3 Q4 232 Not applicable2 High1 Low1 not blocked2 No public exploit2
Q2 18Q4 18Q2 19Q4 19Q2 20Q4 20Q2 21Q4 21Q2 22Q4 22Q2 23Q4 23
48 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed.
CVE Severity Published▾ Status Exploitation Description
CVE-2023-25756 High 2023-11-14 Not applicable No public exploit Out-of-bounds read in the BIOS firmware for some Intel(R) Processors may allow an authenticated user to potentially enable escalation of privilege via adjacent access.
CVE-2023-22329 Low 2023-11-14 Not applicable No public exploit Improper input validation in the BIOS firmware for some Intel(R) Processors may allow an authenticated user to potentially enable denial of service via adjacent access.
CVE-2022-44611 High 2023-08-11 Not applicable No public exploit Improper input validation in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via adjacent access.
CVE-2022-43505 Medium 2023-08-11 Not applicable No public exploit Insufficient control flow management in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable denial of service via local access.
CVE-2022-40982 Medium 2023-08-11 Not applicable No public exploit Information exposure through microarchitectural state after transient execution in certain vector execution units for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.
CVE-2022-38087 Medium 2023-05-10 Not applicable No public exploit Exposure of resource to wrong sphere in BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable information disclosure via local access.
CVE-2022-33894 High 2023-05-10 Not applicable No public exploit Improper input validation in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.
CVE-2022-26373 Medium 2022-08-18 Not applicable No public exploit Non-transparent sharing of return predictor targets between contexts in some Intel(R) Processors may allow an authorized user to potentially enable information disclosure via local access.
CVE-2022-29901 Medium 2022-07-12 Not applicable No public exploit Intel microprocessor generations 6 to 8 are affected by a new Spectre variant that is able to bypass their retpoline mitigation in the kernel to leak arbitrary data. An attacker with unprivileged user access can hijack return instructions to achieve arbitrary speculative code execution under certain microarchitecture-dependent conditions.
CVE-2022-21180 Medium 2022-06-15 Not applicable No public exploit Improper input validation for some Intel(R) Processors may allow an authenticated user to potentially cause a denial of service via local access.
CVE-2022-21151 Medium 2022-05-12 Not applicable No public exploit Processor optimization removal or modification of security-critical code for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.
CVE-2021-33124 Medium 2022-05-12 Not applicable No public exploit Out-of-bounds write in the BIOS authenticated code module for some Intel(R) Processors may allow a privileged user to potentially enable aescalation of privilege via local access.
CVE-2021-33123 High 2022-05-12 Not applicable No public exploit Improper access control in the BIOS authenticated code module for some Intel(R) Processors may allow a privileged user to potentially enable aescalation of privilege via local access.
CVE-2022-0002 Medium 2022-03-11 Not applicable No public exploit Non-transparent sharing of branch predictor within a context in some Intel(R) Processors may allow an authorized user to potentially enable information disclosure via local access.
CVE-2022-0001 Medium 2022-03-11 Not applicable No public exploit Non-transparent sharing of branch predictor selectors between contexts in some Intel(R) Processors may allow an authorized user to potentially enable information disclosure via local access.
CVE-2021-0156 High 2022-02-09 Not applicable No public exploit Improper input validation in the firmware for some Intel(R) Processors may allow an authenticated user to potentially enable an escalation of privilege via local access.
CVE-2021-0125 Medium 2022-02-09 Not applicable No public exploit Improper initialization in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via physical access.
CVE-2021-0124 Medium 2022-02-09 Not applicable No public exploit Improper access control in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via physical access.
CVE-2021-0119 Medium 2022-02-09 Not applicable No public exploit Improper initialization in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via physical access.
CVE-2021-0118 Medium 2022-02-09 Not applicable No public exploit Out-of-bounds read in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable an escalation of privilege via local access.
CVE-2021-0117 High 2022-02-09 Not applicable No public exploit Pointer issues in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable an escalation of privilege via local access.
CVE-2021-0116 High 2022-02-09 Not applicable No public exploit Out-of-bounds write in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable an escalation of privilege via local access.
CVE-2021-0115 Medium 2022-02-09 Not applicable No public exploit Buffer overflow in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.
CVE-2021-0111 Medium 2022-02-09 Not applicable No public exploit NULL pointer dereference in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable an escalation of privilege via local access.
CVE-2021-0107 Medium 2022-02-09 Not applicable No public exploit Unchecked return value in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.
CVE-2021-0103 Medium 2022-02-09 Not applicable No public exploit Insufficient control flow management in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable an escalation of privilege via local access.
CVE-2021-0099 High 2022-02-09 Not applicable No public exploit Insufficient control flow management in the firmware for some Intel(R) Processors may allow an authenticated user to potentially enable an escalation of privilege via local access.
CVE-2021-0093 Medium 2022-02-09 Not applicable No public exploit Incorrect default permissions in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable a denial of service via local access.
CVE-2021-0092 Medium 2022-02-09 Not applicable No public exploit Improper access control in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable a denial of service via local access.
CVE-2021-0091 High 2022-02-09 Not applicable No public exploit Improper access control in the firmware for some Intel(R) Processors may allow an unauthenticated user to potentially enable an escalation of privilege via local access.
CVE-2020-8695 Medium 2020-11-12 Not applicable No public exploit Observable discrepancy in the RAPL interface for some Intel(R) Processors may allow a privileged user to potentially enable information disclosure via local access.
CVE-2020-8694 Medium 2020-11-12 Not applicable No public exploit Insufficient access control in the Linux kernel driver for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.
CVE-2020-0543 Medium 2020-06-15 Outside Waratek scope No public exploit Incomplete cleanup from specific special register read operations in some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.
CVE-2020-0551 Medium 2020-03-12 Not applicable Proof of concept only Load value injection in some Intel(R) Processors utilizing speculative execution may allow an authenticated user to potentially enable information disclosure via a side channel with local access. The list of affected products is provided in intel-sa-00334: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00334.html
CVE-2020-0549 Medium 2020-01-28 Not applicable No public exploit Cleanup errors in some data cache evictions for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.
CVE-2020-0548 Medium 2020-01-28 Not applicable No public exploit Cleanup errors in some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.
CVE-2019-11135 Medium 2019-11-14 Not applicable No public exploit TSX Asynchronous Abort condition on some CPUs utilizing speculative execution may allow an authenticated user to potentially enable information disclosure via a side channel with local access.
CVE-2019-0155 High 2019-11-14 Not applicable No public exploit Insufficient access control in a subsystem for Intel (R) processor graphics in 6th, 7th, 8th and 9th Generation Intel(R) Core(TM) Processor Families; Intel(R) Pentium(R) Processor J, N, Silver and Gold Series; Intel(R) Celeron(R) Processor J, N, G3900 and G4900 Series; Intel(R) Atom(R) Processor A and E3900 Series; Intel(R) Xeon(R) Processor E3-1500 v5 and v6, E-2100 and E-2200 Processor Families; Intel(R) Graphics Driver for Windows before 26.20.100.6813 (DCH) or 26.20.100.6812 and before 21.20.x.5077 (aka15.45.5077), i915 Linux Driver for Intel(R) Processor Graphics before versions 5.4-rc7, 5.3.11, 4.19.84, 4.14.154, 4.9.201, 4.4.201 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVE-2018-12207 Medium 2019-11-14 Not applicable No public exploit Improper invalidation for page table updates by a virtual guest operating system for multiple Intel(R) Processors may allow an authenticated user to potentially enable denial of service of the host system via local access.
CVE-2018-3646 Medium 2018-08-14 Not applicable No public exploit Systems with microprocessors utilizing speculative execution and address translations may allow unauthorized disclosure of information residing in the L1 data cache to an attacker with local user access with guest OS privilege via a terminal page fault and a side-channel analysis.
CVE-2018-3620 Medium 2018-08-14 Not applicable No public exploit Systems with microprocessors utilizing speculative execution and address translations may allow unauthorized disclosure of information residing in the L1 data cache to an attacker with local user access via a terminal page fault and a side-channel analysis.
CVE-2018-3693 Medium 2018-07-10 Not applicable No public exploit Systems with microprocessors utilizing speculative execution and branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a speculative buffer overflow and side-channel analysis.
CVE-2018-3619 Medium 2018-07-10 Not applicable No public exploit Information disclosure vulnerability in storage media in systems with Intel Optane memory module with Whole Disk Encryption may allow an attacker to recover data via physical access.
CVE-2018-3665 Medium 2018-06-21 Not applicable No public exploit System software utilizing Lazy FP state restore technique on systems using Intel Core-based microprocessors may potentially allow a local process to infer data from another process through a speculative execution side channel.
CVE-2018-9056 Medium 2018-03-27 Not applicable No public exploit Systems with microprocessors utilizing speculative execution may allow unauthorized disclosure of information to an attacker with local user access via a side-channel attack on the directional branch predictor, as demonstrated by a pattern history table (PHT), aka BranchScope.
CVE-2017-5754 Medium 2018-01-04 Not applicable Proof of concept only Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis of the data cache.
CVE-2017-5753 Medium 2018-01-04 Outside Waratek scope Exploited Systems with microprocessors utilizing speculative execution and branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis.
CVE-2017-5715 Medium 2018-01-04 Outside Waratek scope Working exploit published Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis.