CVE-2021-0154

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Improper input validation in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable aescalation of privilege via local access.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-20

Affected software

No affected versions have been published.

Timeline

Published: May 12, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2021

CVE-2021-01555.5Unchecked return value in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable information discl CVE-2021-01567.8Improper input validation in the firmware for some Intel(R) Processors may allow an authenticated user to potentially enable an escalation o CVE-2021-01576.7Insufficient control flow management in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable esc CVE-2021-01586.7Improper input validation in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of CVE-2021-01597.8Improper input validation in the BIOS authenticated code module for some Intel(R) Processors may allow a privileged user to potentially enab CVE-2021-01607.8Uncontrolled search path in some Intel(R) NUC Pro Chassis Element AverMedia Capture Card drivers before version 3.0.64.143 may allow an auth CVE-2021-01616.7Improper input validation in firmware for Intel(R) PROSet/Wireless Wi-Fi in multiple operating systems and Killer(TM) Wi-Fi in Windows 10 an CVE-2021-01628.8Improper input validation in software for Intel(R) PROSet/Wireless Wi-Fi and Killer(TM) Wi-Fi in Windows 10 and 11 may allow an unauthentica CVE-2021-01638.8Improper Validation of Consistency within input in software for Intel(R) PROSet/Wireless Wi-Fi and Killer(TM) Wi-Fi in Windows 10 and 11 may CVE-2021-01647.8Improper access control in firmware for Intel(R) PROSet/Wireless Wi-Fi in multiple operating systems and Killer(TM) Wi-Fi in Windows 10 and CVE-2021-01656.5Improper input validation in firmware for Intel(R) PROSet/Wireless Wi-Fi in multiple operating systems and Killer(TM) Wi-Fi in Windows 10 an CVE-2021-01666.7Exposure of Sensitive Information to an Unauthorized Actor in firmware for some Intel(R) PROSet/Wireless Wi-Fi in multiple operating systems