CVE-2019-11136

MediumCVSS 6.7

Published: 14/11/2019(UTC)Updated: 08/10/2026(UTC)Translated: 09/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.38%

30th percentile - higher than 30% of all known CVEs

Summary

Insufficient access control in system firmware for Intel Xeon Scalable Processors, 2nd Generation Intel Xeon Scalable Processors and Intel Xeon Processors D Family may allow a privileged user to potentially enable escalation of privilege, denial of service and/or information disclosure via local access.

Risk Assessment

A privileged local user could gain control over the system, potentially leading to severe security breaches and data loss.

Recommendation

Update Intel processor firmware to the latest version and restrict local access to trusted users.

Other vulnerabilities in Intel Xeon Scalable Processors

CVE-2026-20707Medium
Hardware logic contains race conditions in 3rd Gen Intel Xeon Scalable Processors (Ring 3), which may allow denial of service. An unprivileged attacker with an authenticated user and a high complexity attack can cause system unavailability via local access, without user interaction.

Original NVD description (English source)

Insufficient access control in system firmware for Intel(R) Xeon(R) Scalable Processors, 2nd Generation Intel(R) Xeon(R) Scalable Processors and Intel(R) Xeon(R) Processors D Family may allow a privileged user to potentially enable escalation of privilege, denial of service and/or information disclosure via local access.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS