CVE-2021-0188
Return of pointer value outside of expected range in the BIOS firmware for some Intel(R)...
CVE-2021-0188 is a high vulnerability (CVSS 7.8) in Intel Xeon E3-1220 V5 Firmware, published May 12, 2022. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.28%, the 20th percentile. No source names a fixed version.
- Severity
- 7.8 HighCVSS 3.1, NVD
- Exploit chance
- 0.28%EPSS, 20th percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
- No fix listedNo source names one
Description
Return of pointer value outside of expected range in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable aescalation of privilege via local access.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- Low
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
Affected products
- intel xeon e3-1220 v5 firmware
- intel xeon e3-1220 v6 firmware
- intel xeon e3-1225 v5 firmware
- intel xeon e3-1225 v6 firmware
- intel xeon e3-1230 v5 firmware
- intel xeon e3-1230 v6 firmware
- intel xeon e3-1235l v5 firmware
- intel xeon e3-1240 v5 firmware
- intel xeon e3-1240 v6 firmware
- intel xeon e3-1240l v5 firmware
- intel xeon e3-1245 v5 firmware
- intel xeon e3-1245 v6 firmware
Show 25 moreShow less
- intel xeon e3-1260l v5 firmware
- intel xeon e3-1268l v5 firmware
- intel xeon e3-1270 v5 firmware
- intel xeon e3-1270 v6 firmware
- intel xeon e3-1275 v5 firmware
- intel xeon e3-1275 v6 firmware
- intel xeon e3-1280 v5 firmware
- intel xeon e3-1280 v6 firmware
- intel xeon e3-1285 v6 firmware
- intel xeon e3-1501l v6 firmware
- intel xeon e3-1501m v6 firmware
- intel xeon e3-1505l v5 firmware
- intel xeon e3-1505l v6 firmware
- intel xeon e3-1505m v5 firmware
- intel xeon e3-1505m v6 firmware
- intel xeon e3-1515m v5 firmware
- intel xeon e3-1535m v5 firmware
- intel xeon e3-1535m v6 firmware
- intel xeon e3-1545m v5 firmware
- intel xeon e3-1558l v5 firmware
- intel xeon e3-1565l v5 firmware
- intel xeon e3-1575m v5 firmware
- intel xeon e3-1578l v5 firmware
- intel xeon e3-1585 v5 firmware
- intel xeon e3-1585l v5 firmware
What each source reports
NVD Score used
Return of pointer value outside of expected range in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable aescalation of privilege via local access.
- Record
CVE-2021-0188- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - CVSS 2.0
- 7.2 High
AV:L/AC:L/Au:N/C:C/I:C/A:C - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE List
Return of pointer value outside of expected range in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable aescalation of privilege via local access.
- Record
CVE-2021-0188- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-119
- Updated
- 2026-11-02
EUVDEUVD-2021-2807
Return of pointer value outside of expected range in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable aescalation of privilege via local access.
- Record
EUVD-2021-2807- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-vhvw-mwr5-fw35
Return of pointer value outside of expected range in the BIOS firmware for some Intel(R)...
Return of pointer value outside of expected range in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable aescalation of privilege via local access.
- Record
GHSA-vhvw-mwr5-fw35- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-119
- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| first indexed | CVE List, EUVD, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.