CVE-2021-0099

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Insufficient control flow management in the firmware for some Intel(R) Processors may allow an authenticated user to potentially enable an escalation of privilege via local access.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected software

Vendor	Product	Versions
n/a	Intel(R) Processors	See references

References

https://security.netapp.com/advisory/ntap-20220210-0007/Third Party Advisory
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00527.htmlVendor Advisory
https://security.netapp.com/advisory/ntap-20220210-0007/Third Party Advisory
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00527.htmlVendor Advisory

Timeline

Published: Feb 9, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2021

CVE-2021-01007.8Incorrect default permissions in the installer for the Intel(R) SSD Data Center Tool, versions downloaded before 12/31/2020, may allow an au CVE-2021-01018.8Buffer overflow in the BMC firmware for Intel(R) Server BoardM10JNP2SB before version EFI BIOS 7215, BMC 8100.01.08 may allow an unauthentic CVE-2021-01027.8Insecure inherited permissions in the Intel Unite(R) Client for Windows before version 4.2.25031 may allow an authenticated user to potentia CVE-2021-01036.7Insufficient control flow management in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable an escal CVE-2021-01047.8Uncontrolled search path element in the installer for the Intel(R) Rapid Storage Technology software, before versions 17.9.0.34, 18.0.0.640 CVE-2021-01057.3Insecure inherited permissions in some Intel(R) ProSet/Wireless WiFi drivers may allow an authenticated user to potentially enable informati CVE-2021-01067.8Incorrect default permissions in the Intel(R) Optane(TM) DC Persistent Memory for Windows software versions before 2.00.00.3842 or 1.00.00.3 CVE-2021-01076.7Unchecked return value in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privileg CVE-2021-01087.3Uncontrolled search path in the Intel Unite(R) Client for Windows before version 4.2.25031 may allow an authenticated user to potentially en CVE-2021-01097.8Insecure inherited permissions for the Intel(R) SOC driver package for STK1A32SC before version 604 may allow an authenticated user to poten CVE-2021-01105.5Improper access control in some Intel(R) Thunderbolt(TM) Windows DCH Drivers before version 1.41.1054.0 may allow unauthenticated user to po CVE-2021-01116.7NULL pointer dereference in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable an escalation of pri