CVE-2026-20901
4.0
Vector
CVSS:4.0/AV:L/AC:H/AT:P/PR:H/UI:N/VC:N/VI:N/VA:N/SC:N/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:XShow more
CVSS:4.0/AV:L/AC:H/AT:P/PR:H/UI:N/VC:N/VI:N/VA:N/SC:N/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:XShow less
Source: secure@intel.com (Secondary)
Description
Improper input validation for some Intel(R) Xeon(R) processors within firmware may allow an escalation of privilege. Startup code and smm adversary with a privileged user combined with a high complexity attack may enable data alteration. This result may potentially occur via local access when attack requirements are present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (none) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (high) and availability (none) impacts.
Affected (109)
Products: Intel: Xeon Bronze 3408u Firmware, Xeon Gold 5403n Firmware, Xeon Gold 5415 Firmware, Xeon Platinum 8592+ Firmware, Xeon Platinum 8592v Firmware, Xeon Platinum 8593q Firmware, Xeon Silver 4509y Firmware, Xeon Silver 4510 Firmware, Xeon Silver 4510t Firmware, Xeon Silver 4514y Firmware, Xeon Gold 5420 Firmware, Xeon Gold 5423n Firmware, Xeon Gold 5433n Firmware, Xeon Gold 6403n Firmware, Xeon Gold 6423n Firmware, Xeon Gold 6433n Firmware, Xeon Gold 6433ne Firmware, Xeon Gold 6438y Firmware, Xeon Gold 6443n Firmware, Xeon Platinum 8460y Firmware, Xeon Platinum 8462y Firmware, Xeon Platinum 8480 Firmware, Xeon Silver 4416 Firmware, Xeon Silver 4516y+ Firmware, Xeon Bronze 3508u Firmware, Xeon Gold 5512u Firmware, Xeon Gold 5515+ Firmware, Xeon Gold 5520+ Firmware, Xeon Gold 6526y Firmware, Xeon Gold 6530 Firmware, Xeon Gold 6534 Firmware, Xeon Gold 6538n Firmware, Xeon Gold 6538y+ Firmware, Xeon Gold 6542y Firmware, Xeon Gold 6544y Firmware, Xeon Gold 6548n Firmware, Xeon Gold 6548y+ Firmware, Xeon Gold 6554s Firmware, Xeon Gold 6558q Firmware, Xeon Platinum 8558 Firmware, Xeon Platinum 8558p Firmware, Xeon Platinum 8558u Firmware, Xeon Platinum 8562y+ Firmware, Xeon Platinum 8568y+ Firmware, Xeon Platinum 8570 Firmware, Xeon Platinum 8571n Firmware, Xeon Platinum 8580 Firmware, Xeon Platinum 8581v Firmware, Xeon Platinum 8444h Firmware, Xeon Gold 6454s Firmware, Xeon Gold 5418y Firmware, Xeon Gold 6430 Firmware, Xeon Gold 5418n Firmware, Xeon Gold 6414u Firmware, Xeon Gold 5416s Firmware, Xeon Gold 5412u Firmware, Xeon Gold 5411n Firmware, Xeon Silver 4410y Firmware, Xeon Silver 4410t Firmware, Xeon Bronze 3408u, Xeon Gold 5411n, Xeon Gold 5412u, Xeon Gold 5415, Xeon Gold 5416s, Xeon Gold 5418n, Xeon Gold 5418y, Xeon Gold 5420, Xeon Gold 6414u, Xeon Gold 6430, Xeon Gold 6454s, Xeon Platinum 8444h, Xeon Silver 4410t, Xeon Silver 4410y, Xeon Silver 4416, Xeon Platinum 8490h Firmware, Xeon Gold 6458q Firmware, Xeon Platinum 8471n Firmware, Xeon Gold 6448y Firmware, Xeon Platinum 8470 Firmware, Xeon Gold 6448h Firmware, Xeon Platinum 8470q Firmware, Xeon Gold 6444y Firmware, Xeon Platinum 8470n Firmware, Xeon Gold 6442y Firmware, Xeon Platinum 8468 Firmware, Xeon Platinum 8468v Firmware, Xeon Gold 6438n Firmware, Xeon Platinum 8468h Firmware, Xeon Gold 6438m Firmware, Xeon Platinum 8461v Firmware, Xeon Gold 6434h Firmware, Xeon Gold 6434 Firmware, Xeon Platinum 8460h Firmware, Xeon Gold 6428n Firmware, Xeon Platinum 8458p Firmware, Xeon Gold 6426y Firmware, Xeon Platinum 8454h Firmware, Xeon Gold 6421n Firmware, Xeon Platinum 8452y Firmware, Xeon Gold 6418h Firmware, Xeon Platinum 8450h Firmware, Xeon Gold 6416h Firmware
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
Configuration B
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Intel Xeon Gold 5403n | All versions |
Configuration E
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Intel Xeon Gold 5415+ | All versions |
Configuration F
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Intel Xeon Platinum 8592+ | All versions |
Configuration G
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Intel Xeon Platinum 8592v | All versions |
Configuration H
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Intel Xeon Platinum 8593q | All versions |
Configuration I
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Intel Xeon Silver 4509y | All versions |
Configuration J
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Intel Xeon Silver 4510 | All versions |
Configuration K
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Intel Xeon Silver 4510t | All versions |
Configuration L
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Intel Xeon Silver 4514y | All versions |
Configuration Q
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Intel Xeon Gold 5420+ | All versions |
Configuration R
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Intel Xeon Gold 5423n | All versions |
Configuration S
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Intel Xeon Gold 5433n | All versions |
Configuration T
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Intel Xeon Gold 6403n | All versions |
Configuration Y
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Intel Xeon Gold 6423n | All versions |
Configuration C
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Intel Xeon Gold 6433n | All versions |
Configuration D
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Intel Xeon Gold 6433ne | All versions |
Configuration I
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Intel Xeon Gold 6438y+ | All versions |
Configuration K
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Intel Xeon Gold 6443n | All versions |
Configuration W
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Intel Xeon Platinum 8460y+ | All versions |
Configuration Y
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Intel Xeon Platinum 8462y+ | All versions |
Configuration G
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Intel Xeon Platinum 8480+ | All versions |
Configuration K
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Intel Xeon Silver 4416+ | All versions |
Configuration L
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Intel Xeon Silver 4516y+ | All versions |
Configuration M
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Intel Xeon Bronze 3508u | All versions |
Configuration N
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Intel Xeon Gold 5512u | All versions |
Configuration O
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Intel Xeon Gold 5515+ | All versions |
Configuration P
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Intel Xeon Gold 5520+ | All versions |
Configuration Q
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Intel Xeon Gold 6526y | All versions |
Configuration R
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Intel Xeon Gold 6530 | All versions |
Configuration S
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Intel Xeon Gold 6534 | All versions |
Configuration T
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Intel Xeon Gold 6538n | All versions |
Configuration U
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Intel Xeon Gold 6538y+ | All versions |
Configuration V
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Intel Xeon Gold 6542y | All versions |
Configuration W
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Intel Xeon Gold 6544y | All versions |
Configuration X
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Intel Xeon Gold 6548n | All versions |
Configuration Y
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Intel Xeon Gold 6548y+ | All versions |
Configuration Z
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Intel Xeon Gold 6554s | All versions |
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Intel Xeon Gold 6558q | All versions |
Configuration B
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Intel Xeon Platinum 8558 | All versions |
Configuration C
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Intel Xeon Platinum 8558p | All versions |
Configuration D
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Intel Xeon Platinum 8558u | All versions |
Configuration E
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Intel Xeon Platinum 8562y+ | All versions |
Configuration F
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Intel Xeon Platinum 8568y+ | All versions |
Configuration G
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Intel Xeon Platinum 8570 | All versions |
Configuration H
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Intel Xeon Platinum 8571n | All versions |
Configuration I
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Intel Xeon Platinum 8580 | All versions |
Configuration J
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Intel Xeon Platinum 8581v | All versions |
Configuration K
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
Configuration L
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
Configuration M
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
Configuration N
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
Configuration O
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
Configuration P
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
Configuration Q
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
Configuration R
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
Configuration S
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
Configuration T
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
Configuration U
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
Configuration V
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
Configuration W
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
Configuration X
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
Configuration Y
| Vulnerable Software | Affected Versions |
|---|---|
| All versions | |
| All versions | |
| All versions | |
| All versions | |
| All versions | |
| All versions | |
| All versions | |
| All versions | |
| All versions | |
| All versions | |
| All versions | |
| All versions | |
| All versions | |
| All versions | |
| All versions |
Configuration Z
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Intel Xeon Platinum 8490h | All versions |
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Intel Xeon Platinum 8462y | All versions |
Configuration B
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Intel Xeon Platinum 8480 | All versions |
Configuration C
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Intel Xeon Gold 6458q | All versions |
Configuration D
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Intel Xeon Platinum 8471n | All versions |
Configuration E
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Intel Xeon Gold 6448y | All versions |
Configuration F
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Intel Xeon Platinum 8470 | All versions |
Configuration G
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Intel Xeon Gold 6448h | All versions |
Configuration H
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Intel Xeon Platinum 8470q | All versions |
Configuration I
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Intel Xeon Gold 6444y | All versions |
Configuration J
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Intel Xeon Platinum 8470n | All versions |
Configuration K
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Intel Xeon Gold 6442y | All versions |
Configuration L
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Intel Xeon Platinum 8468 | All versions |
Configuration M
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Intel Xeon Gold 6438y | All versions |
Configuration N
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Intel Xeon Platinum 8468v | All versions |
Configuration O
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Intel Xeon Gold 6438n | All versions |
Configuration P
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Intel Xeon Platinum 8468h | All versions |
Configuration Q
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Intel Xeon Gold 6438m | All versions |
Configuration R
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Intel Xeon Platinum 8461v | All versions |
Configuration S
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Intel Xeon Gold 6434h | All versions |
Configuration T
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Intel Xeon Platinum 8460y | All versions |
Configuration U
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Intel Xeon Gold 6434 | All versions |
Configuration V
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Intel Xeon Platinum 8460h | All versions |
Configuration W
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Intel Xeon Gold 6428n | All versions |
Configuration X
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Intel Xeon Platinum 8458p | All versions |
Configuration Y
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Intel Xeon Gold 6426y | All versions |
Configuration Z
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Intel Xeon Platinum 8454h | All versions |
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Intel Xeon Gold 6421n | All versions |
Configuration B
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Intel Xeon Platinum 8452y | All versions |
Configuration C
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Intel Xeon Gold 6418h | All versions |
Configuration D
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Intel Xeon Platinum 8450h | All versions |
Configuration E
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Intel Xeon Gold 6416h | All versions |
References (1)
Source: secure@intel.com
Vendor Advisory
Timeline
No history available yet.