CVE-2021-0099

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Insufficient control flow management in the firmware for some Intel(R) Processors may allow an authenticated user to potentially enable an escalation of privilege via local access.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected software

No affected versions have been published.

Timeline

Published
Feb 9, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-01007.8Incorrect default permissions in the installer for the Intel(R) SSD Data Center Tool, versions downloaded before 12/31/2020, may allow an auCVE-2021-01018.8Buffer overflow in the BMC firmware for Intel(R) Server BoardM10JNP2SB before version EFI BIOS 7215, BMC 8100.01.08 may allow an unauthenticCVE-2021-01027.8Insecure inherited permissions in the Intel Unite(R) Client for Windows before version 4.2.25031 may allow an authenticated user to potentiaCVE-2021-01036.7Insufficient control flow management in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable an escalCVE-2021-01047.8Uncontrolled search path element in the installer for the Intel(R) Rapid Storage Technology software, before versions 17.9.0.34, 18.0.0.640 CVE-2021-01057.3Insecure inherited permissions in some Intel(R) ProSet/Wireless WiFi drivers may allow an authenticated user to potentially enable informatiCVE-2021-01067.8Incorrect default permissions in the Intel(R) Optane(TM) DC Persistent Memory for Windows software versions before 2.00.00.3842 or 1.00.00.3CVE-2021-01076.7Unchecked return value in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilegCVE-2021-01087.3Uncontrolled search path in the Intel Unite(R) Client for Windows before version 4.2.25031 may allow an authenticated user to potentially enCVE-2021-01097.8Insecure inherited permissions for the Intel(R) SOC driver package for STK1A32SC before version 604 may allow an authenticated user to potenCVE-2021-01105.5Improper access control in some Intel(R) Thunderbolt(TM) Windows DCH Drivers before version 1.41.1054.0 may allow unauthenticated user to poCVE-2021-01116.7NULL pointer dereference in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable an escalation of pri
CVE-2021-0099: High severity, CVSS 7.8 | Vulnix