Phoenix UEFI bug affects long list of Intel chip families
Briefly

Eclypsium disclosed CVE-2024-0762, affecting Phoenix Technologies' UEFI firmware on Intel chips since Kaby Lake, allowing for buffer overflow and code execution.
The vulnerability in Trusted Platform Module configuration (TCG2_CONFIGURATION) could lead to privilege escalation and exploits, despite devices having TPM for security.
Read at Theregister
[
|
]