Threats Tagged 'cve-2026-20898'

An improper access control vulnerability exists in the firmware of the Alias Checking Trusted Module for some Intel Xeon processors. This flaw may allow a local attacker with high privileges and specialized internal knowledge to escalate privileges. The vulnerability impacts system confidentiality and integrity but does not affect availability. Exploitation requires a complex attack and privileged user access, with no user interaction needed.

Improper access control in the firmware for some in Alias Checking Trusted Module for some Intel(R) Xeon(R) processors may allow an escalation of privilege. Startup code and SMM adversary with a privileged user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (high), integrity (high) and availability (none) impacts.