← Vulnerability feed

Vulnerability record · CVE-2020-8695 · published 12 November 2020

CVE-2020-8695: Intel core i7-8510y firmware observable discrepancy vulnerability

Intel · Core I7 8510y Firmware

Observable discrepancy in the RAPL interface for some Intel(R) Processors may allow a privileged user to potentially enable information disclosure via local access.

5.5 CVSS 3.1 Medium EPSS 0.42% · top 66.3% CWE-203 · Observable discrepancy
5.5CVSS 3.1 base score, v2 2.1
0.42%EPSS exploitation probability, 30 days
NoNot in CISA KEV
150Affected product versions listed by NVD
12References
17 Jun 2026Last modified by NVD

Description

Observable discrepancy in the RAPL interface for some Intel(R) Processors may allow a privileged user to potentially enable information disclosure via local access.

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Affected products

150 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://lists.debian.org/debian-lts-announce/2021/02/msg00007.html Mailing ListThird Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AQ24MFBVH3HJW3PNRQBRY4Y
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GRFC7UAPKAFFH5WX3AMDUBV
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MAAGIK5CXKBPGY3R4UR5VO5
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NEM2FZWVE4FNGYNQU3WCBAW
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00389 Vendor Advisory
https://lists.debian.org/debian-lts-announce/2021/02/msg00007.html Mailing ListThird Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AQ24MFBVH3HJW3PNRQBRY4Y
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GRFC7UAPKAFFH5WX3AMDUBV
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MAAGIK5CXKBPGY3R4UR5VO5
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NEM2FZWVE4FNGYNQU3WCBAW
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00389 Vendor Advisory

Track CVE-2020-8695 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

8.0CVE-2023-25756Intel atom x6200fe firmware out-of-bounds read vulnerabilityOut-of-bounds read in the BIOS firmware for some Intel(R) Processors may allow an authenticated user to potentially enable escalation of privilege vi…EPSS 0.40%6.5CVE-2022-40982Redhat enterprise linux observable discrepancy vulnerabilityInformation exposure through microarchitectural state after transient execution in certain vector execution units for some Intel(R) Processors may al…EPSS 3.0%6.4CVE-2022-21198Intel celeron 1000m firmware toctou race condition vulnerabilityTime-of-check time-of-use race condition in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalati…EPSS 0.15%5.5CVE-2020-8694Intel core i7-8510y firmware vulnerabilityInsufficient access control in the Linux kernel driver for some Intel(R) Processors may allow an authenticated user to potentially enable information…EPSS 0.45%3.5CVE-2023-22329Intel atom x6200fe firmware improper input validation vulnerabilityImproper input validation in the BIOS firmware for some Intel(R) Processors may allow an authenticated user to potentially enable denial of service v…EPSS 0.30%5.3CVE-2024-39891Twilio Authy API phone number enumeration via observable discrepancyAn unauthenticated endpoint in the Twilio Authy API, reachable through Authy Android before 25.1.0 and Authy iOS before 26.1.0, accepted streams of p…KEVEPSS 1.7%analysed

Source: NIST National Vulnerability Database (record CVE-2020-8695), CISA KEV, FIRST EPSS (scores of 2026-09-29). This page is refreshed as NVD updates the record.