Bios
Vendor:
First CVE: Sep 3, 2008 · Active for 17 years
27
Total CVEs
More Total CVEs than 96% of tracked products
4.5
Avg CVEs / Year
Higher CVE frequency than 86% of tracked products
6.3
Avg CVSS
Higher Avg CVSS than 26% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Bios over time
Volume of CVEsAvg CVSS Base Score
First CVE
Sep 3, 2008
17 years ago
Most Recent CVE
May 12, 2022
1,534 days ago
CVE Severity & Scoring
Bios27 CVEs
78%
19%
All CVEs352,294 CVEs
45%
40%
11%
LowMediumHigh
Attack Vector
Local22 (81.5%)
Network0 (0.0%)
Unknown2 (7.4%)
Physical1 (3.7%)
Adjacent Network2 (7.4%)
Attack Complexity
Low24 (88.9%)
High1 (3.7%)
Unknown2 (7.4%)
User Interaction
None25 (92.6%)
Unknown2 (7.4%)
Required0 (0.0%)
Privileges Required
Low10 (37.0%)
High14 (51.9%)
None1 (3.7%)
Unknown2 (7.4%)
Top CVEs
Signals from CVEs in this product scope (27 CVEs).
27 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2019-14557HIGH Buffer overflow in BIOS firmware for 8th, 9th, 10th Generation Intel(R) Core(TM), Intel(R) Celeron(R) Processor 4000 & 5000 Series Processors may allow an authenticated user to pot | Oct 5, 2020 | 8.0 | 26 | NO | NO |
CVE-2020-8739HIGH Use of potentially dangerous function in Intel BIOS platform sample code for some Intel(R) Processors may allow an authenticated user to potentially enable escalation of privilege | Nov 12, 2020 | 7.8 | 25 | NO | NO |
CVE-2018-3612HIGH Intel NUC kits with insufficient input validation in system firmware, potentially allows a local attacker to elevate privileges to System Management Mode (SMM). | May 10, 2018 | 7.8 | 24 | NO | NO |
CVE-2020-8700MEDIUM Improper input validation in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access. | Jun 9, 2021 | 6.7 | 23 | NO | NO |
CVE-2020-8672HIGH Out of bound read in BIOS firmware for 8th, 9th Generation Intel(R) Core(TM), Intel(R) Celeron(R) Processor 4000 Series Processors may allow an unauthenticated user to potentially | Feb 2, 2021 | 7.8 | 23 | NO | NO |
CVE-2020-8740MEDIUM Out of bounds write in Intel BIOS platform sample code for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access. | Nov 12, 2020 | 6.7 | 23 | NO | NO |
CVE-2020-8738MEDIUM Improper conditions check in Intel BIOS platform sample code for some Intel(R) Processors before may allow a privileged user to potentially enable escalation of privilege via local | Nov 12, 2020 | 6.7 | 23 | NO | NO |
CVE-2020-0588MEDIUM Improper conditions check in BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access. | Nov 12, 2020 | 6.7 | 23 | NO | NO |
CVE-2020-8670MEDIUM Race condition in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access. | Jun 9, 2021 | 6.4 | 22 | NO | NO |
CVE-2020-8764MEDIUM Improper access control in BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access. | Nov 12, 2020 | 6.7 | 22 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (27 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%
Social Chatter
Signals from CVEs in this product scope (27 CVEs).
Media Mentions
Signals from CVEs in this product scope (27 CVEs).
Top CNAs Publishing CVEs For Bios
Top CWEs
Versions
| Version | CVE Count | Avg CVSS | Avg EPSS | KEV | Exploits |
|---|---|---|---|---|---|
| tybyt10h.86a | 1 | 7.8 | 0.3% | 0 | 0 |
| syskli35.86a | 1 | 7.8 | 0.3% | 0 | 0 |
| rybdwi35.86a | 1 | 7.8 | 0.3% | 0 | 0 |
| pe94510m.86a.0050.2007.0710.1559 | 1 | 2.1 | 0.4% | 0 | 0 |
| mybdwi5v.86a | 1 | 7.8 | 0.3% | 0 | 0 |
| mybdwi30.86a | 1 | 7.8 | 0.3% | 0 | 0 |
| mkkbly35.86a | 1 | 7.8 | 0.3% | 0 | 0 |
| mkkbli5v.86a | 1 | 7.8 | 0.3% | 0 | 0 |
| mgm965tw | 1 | 6.9 | 0.3% | 0 | 0 |
| kyskli70.86a | 1 | 7.8 | 0.3% | 0 | 0 |
| gkaplcpx.86a | 1 | 7.8 | 0.3% | 0 | 0 |
| fybyt10h.86a | 1 | 7.8 | 0.3% | 0 | 0 |
| dx38bt | 1 | 6.9 | 0.3% | 0 | 0 |
| dq35mp | 1 | 6.9 | 0.3% | 0 | 0 |
| dq35jo | 1 | 6.9 | 0.3% | 0 | 0 |
| dp35dp | 1 | 6.9 | 0.3% | 0 | 0 |
| dnkbli7v.86a | 1 | 7.8 | 0.3% | 0 | 0 |
| dnkbli5v.86a | 1 | 7.8 | 0.3% | 0 | 0 |
| dnkbli30.86a | 1 | 7.8 | 0.3% | 0 | 0 |
| dg33tl | 1 | 6.9 | 0.3% | 0 | 0 |