Overview 16 matches · 0 in Waratek scope · 0 protected · 2 exploited · 0 CISA KEV · 3 public PoC · 3 EPSS ≥ 0.5
16matches
0in Waratek scope0.0%
0protected0.0%
2exploited12.5%
0CISA KEV0.0%
3public PoC18.8%
3EPSS ≥ 0.518.8%
Protected by Waratek
0
0.0%
Rule in development
0
0.0%
Mitigation candidate
0
0.0%
No exploit published
0
0.0%
Outside Waratek scope
3
18.8%
Not applicable
13
81.2%
Withdrawn CVE
0
0.0%
blocked by ARMR today
0
0.0%
partly blocked
0
0.0%
not blocked
16
100.0%
not established
0
0.0%
unrecorded
0
0.0%
Exploited
2
12.5%
Working exploit published
1
6.2%
Proof of concept only
0
0.0%
Forecast only
0
0.0%
No public exploit
13
81.2%
split by
peak 2 / quarter
Q1 182
Outside Waratek scope2
Medium2
not blocked2
Exploited1
Working exploit published1
Q2 182
Outside Waratek scope1
Not applicable1
Medium2
not blocked2
Exploited1
No public exploit1
Q3 180
Q4 180
Q1 190
Q2 191
Not applicable1
Medium1
not blocked1
No public exploit1
Q3 190
Q4 191
Not applicable1
High1
not blocked1
No public exploit1
Q1 200
Q2 200
Q3 201
Not applicable1
High1
not blocked1
No public exploit1
Q4 201
Not applicable1
Medium1
not blocked1
No public exploit1
Q1 210
Q2 211
Not applicable1
High1
not blocked1
No public exploit1
Q3 210
Q4 211
Not applicable1
Medium1
not blocked1
No public exploit1
Q1 222
Not applicable2
Medium2
not blocked2
No public exploit2
Q2 221
Not applicable1
Medium1
not blocked1
No public exploit1
Q3 221
Not applicable1
Medium1
not blocked1
No public exploit1
Q4 220
Q1 230
Q2 230
Q3 232
Not applicable2
Medium2
not blocked2
No public exploit2
Q1 18Q3 18Q1 19Q3 19Q1 20Q3 20Q1 21Q3 21Q1 22Q3 22Q1 23Q3 23
| CVE | Severity | Published▾ | Status | Exploitation | Description |
|---|---|---|---|---|---|
| CVE-2022-43505 | Medium | 2023-08-11 | Not applicable | No public exploit | Insufficient control flow management in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable denial of service via local access. |
| CVE-2022-27879 | Medium | 2023-08-11 | Not applicable | No public exploit | Improper buffer restrictions in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable information disclosure via local access. |
| CVE-2022-21233 | Medium | 2022-08-18 | Not applicable | No public exploit | Improper isolation of shared resources in some Intel(R) Processors may allow a privileged user to potentially enable information disclosure via local access. |
| CVE-2022-0004 | Medium | 2022-05-12 | Not applicable | No public exploit | Hardware debug modes and processor INIT setting that allow override of locks for some Intel(R) Processors in Intel(R) Boot Guard and Intel(R) TXT may allow an unauthenticated user to potentially enable escalation of privilege via physical access. |
| CVE-2022-0002 | Medium | 2022-03-11 | Not applicable | No public exploit | Non-transparent sharing of branch predictor within a context in some Intel(R) Processors may allow an authorized user to potentially enable information disclosure via local access. |
| CVE-2021-33150 | Medium | 2022-03-11 | Not applicable | No public exploit | Hardware allows activation of test or debug logic at runtime for some Intel(R) Trace Hub instances which may allow an unauthenticated user to potentially enable escalation of privilege via physical access. |
| CVE-2021-0146 | Medium | 2021-11-17 | Not applicable | No public exploit | Hardware allows activation of test or debug logic at runtime for some Intel(R) processors which may allow an unauthenticated user to potentially enable escalation of privilege via physical access. |
| CVE-2020-24489 | High | 2021-06-09 | Not applicable | No public exploit | Incomplete cleanup in some Intel(R) VT-d products may allow an authenticated user to potentially enable escalation of privilege via local access. |
| CVE-2020-0599 | Medium | 2020-11-13 | Not applicable | No public exploit | Improper access control in the PMC for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access. |
| CVE-2020-0559 | High | 2020-08-13 | Not applicable | No public exploit | Insecure inherited permissions in some Intel(R) PROSet/Wireless WiFi products on Windows* 7 and 8.1 before version 21.40.5.1 may allow an authenticated user to potentially enable escalation of privilege via local access. |
| CVE-2019-0155 | High | 2019-11-14 | Not applicable | No public exploit | Insufficient access control in a subsystem for Intel (R) processor graphics in 6th, 7th, 8th and 9th Generation Intel(R) Core(TM) Processor Families; Intel(R) Pentium(R) Processor J, N, Silver and Gold Series; Intel(R) Celeron(R) Processor J, N, G3900 and G4900 Series; Intel(R) Atom(R) Processor A and E3900 Series; Intel(R) Xeon(R) Processor E3-1500 v5 and v6, E-2100 and E-2200 Processor Families; Intel(R) Graphics Driver for Windows before 26.20.100.6813 (DCH) or 26.20.100.6812 and before 21.20.x.5077 (aka15.45.5077), i915 Linux Driver for Intel(R) Processor Graphics before versions 5.4-rc7, 5.3.11, 4.19.84, 4.14.154, 4.9.201, 4.4.201 may allow an authenticated user to potentially enable escalation of privilege via local access. |
| CVE-2019-0120 | Medium | 2019-05-17 | Not applicable | No public exploit | Insufficient key protection vulnerability in silicon reference firmware for Intel(R) Pentium(R) Processor J Series, Intel(R) Pentium(R) Processor N Series, Intel(R) Celeron(R) J Series, Intel(R) Celeron(R) N Series, Intel(R) Atom(R) Processor A Series, Intel(R) Atom(R) Processor E3900 Series, Intel(R) Pentium(R) Processor Silver Series may allow a privileged user to potentially enable denial of service via local access. |
| CVE-2018-3639 | Medium | 2018-05-22 | Outside Waratek scope | Exploited | Systems with microprocessors utilizing speculative execution and speculative execution of memory reads before the addresses of all prior memory writes are known may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis, aka Speculative Store Bypass (SSB), Variant 4. |
| CVE-2017-5703 | Medium | 2018-04-03 | Not applicable | No public exploit | Configuration of SPI Flash in platforms based on multiple Intel platforms allow a local attacker to alter the behavior of the SPI flash potentially leading to a Denial of Service. |
| CVE-2017-5753 | Medium | 2018-01-04 | Outside Waratek scope | Exploited | Systems with microprocessors utilizing speculative execution and branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis. |
| CVE-2017-5715 | Medium | 2018-01-04 | Outside Waratek scope | Working exploit published | Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis. |