Nir Lavi

Name of the Vulnerable Software and Affected Versions: Intel(R) processors with Intel(R) ACTM (affected versions not specified) Description: The issue is related to the exposure of a resource to the wrong sphere in some Intel(R) processors with Intel(R) ACTM, which may allow a privileged user to potentially enable escalation of privilege via local access. This vulnerability is associated with the disclosure of information in an erroneous data area. Exploitation of the vulnerability may allow an attacker to elevate their privileges. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Intel processors 4th Generation and 5th Generation Description: The issue is related to a Time-of-check Time-of-use Race Condition in the Intel Alias Checking Trusted Module (Intel ACTM) component of Intel microcode. This condition arises from synchronization errors when utilizing shared resources. Exploitation of this issue may allow a privileged user to potentially enable escalation of privilege via local access. Recommendations: For Intel processors 4th Generation and 5th Generation, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

The issue is related to the removal or modification of security-critical code in some Intel(R) Processors, potentially allowing an authenticated user to enable information disclosure via local access. This is due to incorrect code generation management. The estimated number of potentially affected devices worldwide is not available. There is no information about real-world incidents where this issue was exploited.