{"id":"CVE-2020-8672","aliases":["EUVD-2020-29520","GHSA-3mxg-74vr-rhx5"],"status":"published","title":"Out of bound read in BIOS firmware for 8th, 9th Generation Intel(R) Core(TM), Intel(R) Celeron(R)...","description":"Out of bound read in BIOS firmware for 8th, 9th Generation Intel(R) Core(TM), Intel(R) Celeron(R) Processor 4000 Series Processors may allow an unauthenticated user to potentially enable elevation of privilege or denial of service via local access.","severity":{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.00345,"percentile":0.28262,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-125"],"published":"2021-02-02T21:16:39Z","modified":"2026-06-17T03:26:44Z","products":[{"vendor":"intel","product":"bios"}],"references":[{"url":"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00356.html","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-8672"},{"url":"https://github.com/advisories/GHSA-3mxg-74vr-rhx5"}],"sources":{"cve":[{"id":"CVE-2020-8672","description":"Out of bound read in BIOS firmware for 8th, 9th Generation Intel(R) Core(TM), Intel(R) Celeron(R) Processor 4000 Series Processors may allow an unauthenticated user to potentially enable elevation of privilege or denial of service via local access.","status":"published","published":"2021-02-02T21:16:39Z","modified":"2024-08-04T10:03:46.374Z","updated_at":"2026-11-02T14:35:50.88562Z"}],"euvd":[{"id":"EUVD-2020-29520","description":"Out of bound read in BIOS firmware for 8th, 9th Generation Intel(R) Core(TM), Intel(R) Celeron(R) Processor 4000 Series Processors may allow an unauthenticated user to potentially enable elevation of privilege or denial of service via local access.","status":"published","published":"2021-02-02T21:16:39Z","modified":"2024-08-04T10:03:46Z","updated_at":"2026-11-03T03:07:56.602123Z"}],"ghsa":[{"id":"GHSA-3mxg-74vr-rhx5","title":"Out of bound read in BIOS firmware for 8th, 9th Generation Intel(R) Core(TM), Intel(R) Celeron(R)...","description":"Out of bound read in BIOS firmware for 8th, 9th Generation Intel(R) Core(TM), Intel(R) Celeron(R) Processor 4000 Series Processors may allow an unauthenticated user to potentially enable elevation of privilege or denial of service via local access.","status":"published","published":"2022-05-24T17:40:46Z","modified":"2023-01-29T05:06:20Z","cwes":["CWE-125"],"updated_at":"2026-11-02T14:46:00.036476Z"}],"nvd":[{"id":"CVE-2020-8672","description":"Out of bound read in BIOS firmware for 8th, 9th Generation Intel(R) Core(TM), Intel(R) Celeron(R) Processor 4000 Series Processors may allow an unauthenticated user to potentially enable elevation of privilege or denial of service via local access.","status":"published","published":"2021-02-02T22:15:12.23Z","modified":"2026-06-17T03:26:44.293Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":4.6,"vector":"AV:L/AC:L/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-125"],"updated_at":"2026-11-02T14:06:34.188486Z"}]}}