CVE-2022-26373
Medium
Published: 18 August 2022
Published
18 August 2022
Modified
05 May 2025
KEV Added
—
Patch
—
CVSS Score v3.1
5.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
EPSS Score
0.0011
28.3th percentile
Risk Priority
11
60% EPSS · 20% KEV · 20% CVSS
Summary
CVE-2022-26373 is a medium-severity an unspecified weakness vulnerability in Intel Xeon Platinum 8253 Firmware. Its CVSS base score is 5.5 (Medium).
Operationally, ranked at the 28.3th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2022-30932
Vulnerability details
Non-transparent sharing of return predictor targets between contexts in some Intel(R) Processors may allow an authorized user to potentially enable information disclosure via local access.
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
intel
xeon platinum 8253 firmware
all versions
intel
xeon platinum 8256 firmware
all versions
intel
xeon platinum 8260 firmware
all versions
intel
xeon platinum 8260l firmware
all versions
intel
xeon platinum 8260m firmware
all versions
intel
xeon platinum 8260y firmware
all versions
intel
xeon platinum 8268 firmware
all versions
intel
xeon platinum 8270 firmware
all versions
intel
xeon platinum 8276 firmware
all versions
intel
xeon platinum 8276l firmware
all versions
+482 more product configuration(s) — see NVD for full list
Mitigating Controls
No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.