Homepage

intel-microcode vulnerabilities

Report a new vulnerability Found a mistake?

Direct Vulnerabilities

Known vulnerabilities in the intel-microcode package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free
VulnerabilityVulnerable Version
  • M
Out-of-Bounds

<3.20250812.0ubuntu0.18.04.1+esm1
  • M
Insufficient Compartmentalization

<3.20250812.0ubuntu0.18.04.1+esm1
  • M
Sequence of Processor Instructions Leads to Unexpected Behavior

<3.20250812.0ubuntu0.18.04.1+esm1
  • M
Insufficient Control Flow Management

<3.20250812.0ubuntu0.18.04.1+esm1
  • M
Improper Handling of Overlap Between Protected Memory Ranges

<3.20250812.0ubuntu0.18.04.1+esm1
  • M
Missing Reference to Active Allocated Resource

<3.20250812.0ubuntu0.18.04.1+esm1
  • M
Out-of-bounds Write

<3.20250812.0ubuntu0.18.04.1+esm1
  • M
Improperly Implemented Security Check for Standard

<3.20250812.0ubuntu0.18.04.1+esm1
  • M
Insufficient Granularity of Access Control

<3.20250812.0ubuntu0.18.04.1+esm1
  • M
CVE-2025-20623

<3.20250512.0ubuntu0.18.04.1+esm1
  • M
Insufficient Resource Pool

<3.20250512.0ubuntu0.18.04.1+esm1
  • M
Uncaught Exception

<3.20250512.0ubuntu0.18.04.1+esm1
  • M
Incorrect Behavior Order

<3.20250512.0ubuntu0.18.04.1+esm1
  • M
CVE-2024-28956

<3.20250512.0ubuntu0.18.04.1+esm1
  • M
CVE-2025-24495

<3.20250512.0ubuntu0.18.04.1+esm1
  • M
CVE-2024-43420

<3.20250512.0ubuntu0.18.04.1+esm1
  • M
CVE-2024-45332

<3.20250512.0ubuntu0.18.04.1+esm1
  • M
Improper Finite State Machines (FSMs) in Hardware Logic

<3.20250211.0ubuntu0.18.04.1+esm1
  • M
Improper Access Control

<3.20250211.0ubuntu0.18.04.1+esm1
  • M
Insufficient Granularity of Access Control

<3.20250211.0ubuntu0.18.04.1+esm1
  • M
Incorrect Default Permissions

<3.20241112.0ubuntu0.18.04.1+esm1
  • M
CVE-2024-23918

<3.20241112.0ubuntu0.18.04.1+esm1
  • M
Improper Finite State Machines (FSMs) in Hardware Logic

<3.20241112.0ubuntu0.18.04.1+esm1
  • M
Information Exposure

<3.20240910.0ubuntu0.18.04.1+esm1
  • M
Improper Finite State Machines (FSMs) in Hardware Logic

<3.20240910.0ubuntu0.18.04.1+esm1
  • M
CVE-2023-42667

<3.20240813.0ubuntu0.18.04.1+esm2
  • M
CVE-2024-24853

<3.20240813.0ubuntu0.18.04.1+esm2
  • M
CVE-2023-49141

<3.20240813.0ubuntu0.18.04.1+esm2
  • M
CVE-2024-25939

<3.20240813.0ubuntu0.18.04.1+esm2
  • M
CVE-2024-24980

<3.20240813.0ubuntu0.18.04.1+esm2
  • M
CVE-2023-43490

<3.20240514.0ubuntu0.18.04.1+esm1
  • M
CVE-2023-47855

<3.20240514.0ubuntu0.18.04.1+esm1
  • M
CVE-2023-46103

<3.20240514.0ubuntu0.18.04.1+esm1
  • M
CVE-2023-45745

<3.20240514.0ubuntu0.18.04.1+esm1
  • M
CVE-2023-45733

<3.20240514.0ubuntu0.18.04.1+esm1
  • M
CVE-2023-38575

<3.20240514.0ubuntu0.18.04.1+esm1
  • M
CVE-2023-22655

<3.20240514.0ubuntu0.18.04.1+esm1
  • M
CVE-2023-39368

<3.20240514.0ubuntu0.18.04.1+esm1
  • M
CVE-2023-28746

<3.20240514.0ubuntu0.18.04.1+esm1
  • H
Sequence of Processor Instructions Leads to Unexpected Behavior

<3.20231114.0ubuntu0.18.04.1+esm1
  • M
CVE-2022-41804

<3.20230808.0ubuntu0.18.04.1+esm1
  • M
CVE-2023-23908

<3.20230808.0ubuntu0.18.04.1+esm1
  • M
Information Exposure

<3.20230808.0ubuntu0.18.04.1+esm1
  • M
Incorrect Calculation

<3.20230214.0ubuntu0.18.04.1
  • M
Incorrect Default Permissions

<3.20230214.0ubuntu0.18.04.1
  • M
CVE-2022-21216

<3.20230214.0ubuntu0.18.04.1
  • M
CVE-2022-38090

<3.20230214.0ubuntu0.18.04.1
  • M
CVE-2022-21233

<3.20220809.0ubuntu0.18.04.1
  • M
Incomplete Cleanup

<3.20220510.0ubuntu0.18.04.1
  • M
Incomplete Cleanup

<3.20220510.0ubuntu0.18.04.1
  • M
Incomplete Cleanup

<3.20220510.0ubuntu0.18.04.1
  • M
Incomplete Cleanup

<3.20220510.0ubuntu0.18.04.1
  • M
CVE-2021-33117

<3.20220510.0ubuntu0.18.04.1
  • M
CVE-2022-21151

<3.20220510.0ubuntu0.18.04.1
  • M
Improper Initialization

<3.20220510.0ubuntu0.18.04.1
  • M
Out-of-bounds Read

<3.20220510.0ubuntu0.18.04.1
  • M
CVE-2021-0127

<3.20220510.0ubuntu0.18.04.1
  • M
CVE-2021-0146

<3.20220510.0ubuntu0.18.04.1
  • H
Incomplete Cleanup

<3.20210608.0ubuntu0.18.04.1
  • M
Information Exposure

<3.20210608.0ubuntu0.18.04.1
  • M
Exposure of Resource to Wrong Sphere

<3.20210608.0ubuntu0.18.04.1
  • M
CVE-2020-24513

<3.20210608.0ubuntu0.18.04.1
  • L
Improper Cross-boundary Removal of Sensitive Data

<3.20210216.0ubuntu0.18.04.1
  • M
CVE-2020-8698

<3.20210216.0ubuntu0.18.04.1
  • M
CVE-2020-8695

<3.20210216.0ubuntu0.18.04.1
  • M
Information Exposure

<3.20200609.0ubuntu0.18.04.0
  • M
Information Exposure

<3.20200609.0ubuntu0.18.04.0
  • M
Information Exposure

<3.20200609.0ubuntu0.18.04.0
  • M
Improper Check for Unusual or Exceptional Conditions

<3.20191115.1ubuntu0.18.04.1
  • M
Improper Check for Unusual or Exceptional Conditions

<3.20191115.1ubuntu0.18.04.1
  • M
Improper Check for Unusual or Exceptional Conditions

<3.20191112-0ubuntu0.18.04.2
  • H
CVE-2019-11135

<3.20191112-0ubuntu0.18.04.2
  • H
Information Exposure

<3.20190514.0ubuntu0.18.04.2
  • M
CVE-2019-11091

<3.20190514.0ubuntu0.18.04.2
  • H
Information Exposure

<3.20190514.0ubuntu0.18.04.2
  • H
Information Exposure

<3.20190514.0ubuntu0.18.04.2
  • M
CVE-2018-12203

<3.20190514.0ubuntu0.18.04.2
  • M
Improper Initialization

<3.20190514.0ubuntu0.18.04.2
  • M
Improper Certificate Validation

<3.20190514.0ubuntu0.18.04.2
  • M
CVE-2018-12202

<3.20190514.0ubuntu0.18.04.2
  • M
Out-of-Bounds

<3.20190514.0ubuntu0.18.04.2
  • H
CVE-2018-3646

<3.20180807a.0ubuntu0.18.04.1
  • H
CVE-2018-3693

<3.20180312.0~ubuntu18.04.1
  • M
Information Exposure

<3.20180807a.0ubuntu0.18.04.1
  • M
Information Exposure

<3.20180807a.0ubuntu0.18.04.1