CVE-2026-20713

The record

Always-incorrect control flow implementation in some firmware for some Intel(R) Xeon(R) processors may allow an escalation of privilege. System software adversary with a privileged user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (none) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (high), integrity (high) and availability (none) impacts.

Affected packages

Related vulnerabilities

• CVE-2026-106586 In sshd in OpenSSH before 10.6, the restrict keyword (in authorized_keys) was supposed to… CWE-670
• CVE-2026-98164 In the Linux kernel, the following vulnerability has been resolved: KVM: x86/mmu: Check… CWE-670
• CVE-2026-98051 In the Linux kernel, the following vulnerability has been resolved: net: bcmasp: fix… CWE-670
• CVE-2026-55624 MintyItanium Lost-Auction is an auction plugin for Minecraft. CWE-670
• CVE-2026-19487 Perl versions from 5.9.4 before 5.41.9 produce incorrect regular expression match results… CWE-670
• CVE-2026-73283 In sshd in OpenSSH before 10.5, the restrict keyword (in authorized_keys) was supposed to… CWE-670
• CVE-2026-14935 A logic vulnerability was found in GStreamer's webrtcbin component. CWE-670
• CVE-2026-56307 Cap-go before 12.128.12 contains a broken cursor pagination vulnerability in the… CWE-670