CVE-2021-0118

MediumCVSS 6.7/10Last modified Jun 17, 2026

Description

Out-of-bounds read in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable an escalation of privilege via local access.

Metrics

CVSS 3.1 6.7/10CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-125

Affected software

No affected versions have been published.

Timeline

Published
Feb 9, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-01196.2Improper initialization in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privileCVE-2021-01205.5Improper initialization in the installer for some Intel(R) Graphics DCH Drivers for Windows 10 before version 27.20.100.9316 may allow an auCVE-2021-01217.8Improper access control in the installer for some Intel(R) Iris(R) Xe MAX Dedicated Graphics Drivers for Windows 10 before version 27.20.100CVE-2021-01246.6Improper access control in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privileCVE-2021-01256.6Improper initialization in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privileCVE-2021-01268.0Improper input validation for the Intel(R) Manageability Commander before version 2.2 may allow an authenticated user to potentially enable CVE-2021-01275.5Insufficient control flow management in some Intel(R) Processors may allow an authenticated user to potentially enable a denial of service vCVE-2021-01295.7Improper access control in BlueZ may allow an authenticated user to potentially enable information disclosure via adjacent access.CVE-2021-01316.5Use of cryptographically weak pseudo-random number generator (PRNG) in an API for the Intel(R) Security Library before version 3.3 may allowCVE-2021-01324.9Missing release of resource after effective lifetime in an API for the Intel(R) Security Library before version 3.3 may allow a privileged uCVE-2021-01338.1Key exchange without entity authentication in the Intel(R) Security Library before version 3.3 may allow an authenticated user to potentiallCVE-2021-01344.9Improper input validation in an API for the Intel(R) Security Library before version 3.3 may allow a privileged user to potentially enable d