CVE-2020-8694

—

CVSS 3.1

5.5 medium

EPSS

<1%p38

Published

Nov 12, 2020 (Nov 12, 2020)

Modified

Jun 17, 2026

Description

Insufficient access control in the Linux kernel driver for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.

Vendors: intel
Products: core i7-8510y firmware, core i7-8500y firmware, core i5-8310y firmware, core i5-8210y firmware, core i5-8200y firmware, core m3-8100y firmware, core i7-7500u firmware, core i7-7510u firmware, core i7-7600u firmware, core i5-7200u firmware, core i5-7210u firmware, core i5-7300u firmware
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.5%)

In the news2 stories

Week in review: Cybersecurity workforce gap decreases, new issue of (IN)SECURE

Help Net SecurityNov 15, 00:00 UTC · Nov 15, 2020Data breach in the wildCVE-2020-17087 CVE-2020-8694 CVE-2020-8695

New side-channel attacks allow access to sensitive data on Intel CPUs

Help Net SecurityNov 10, 00:00 UTC · Nov 10, 2020Vulnerability CVE-2020-8694 CVE-2020-8695