CVE-2018-12207

Improper invalidation for page table updates by a virtual guest operating system for multiple Intel(R) Processors may allow an authenticated user to potentially enable denial of service of the host system via local access.

• CWE-20

• http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00042.htmlMailing List, Third Party Advisory
• https://access.redhat.com/errata/RHSA-2019:3916Third Party Advisory
• https://access.redhat.com/errata/RHSA-2019:3936Third Party Advisory
• https://access.redhat.com/errata/RHSA-2019:3941Third Party Advisory
• https://access.redhat.com/errata/RHSA-2020:0026Third Party Advisory
• https://access.redhat.com/errata/RHSA-2020:0028Third Party Advisory
• https://access.redhat.com/errata/RHSA-2020:0204Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/I5WWPW4BSZDDW7VHU427XTVXV7ROOFFW/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IZYATWNUGHRBG6I3TC24YHP5Y3J7I6KH/
• https://seclists.org/bugtraq/2020/Jan/21Mailing List, Third Party Advisory
• https://security.gentoo.org/glsa/202003-56Third Party Advisory
• https://support.f5.com/csp/article/K17269881?utm_source=f5support&amp%3Butm_medium=RSS
• https://usn.ubuntu.com/4186-2/Third Party Advisory
• https://www.debian.org/security/2020/dsa-4602Third Party Advisory
• https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00210.htmlVendor Advisory
• https://www.oracle.com/security-alerts/cpujul2020.htmlPatch, Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00042.htmlMailing List, Third Party Advisory
• https://access.redhat.com/errata/RHSA-2019:3916Third Party Advisory
• https://access.redhat.com/errata/RHSA-2019:3936Third Party Advisory
• https://access.redhat.com/errata/RHSA-2019:3941Third Party Advisory
• https://access.redhat.com/errata/RHSA-2020:0026Third Party Advisory
• https://access.redhat.com/errata/RHSA-2020:0028Third Party Advisory
• https://access.redhat.com/errata/RHSA-2020:0204Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/I5WWPW4BSZDDW7VHU427XTVXV7ROOFFW/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IZYATWNUGHRBG6I3TC24YHP5Y3J7I6KH/
• https://seclists.org/bugtraq/2020/Jan/21Mailing List, Third Party Advisory
• https://security.gentoo.org/glsa/202003-56Third Party Advisory
• https://support.f5.com/csp/article/K17269881?utm_source=f5support&amp%3Butm_medium=RSS
• https://usn.ubuntu.com/4186-2/Third Party Advisory
• https://www.debian.org/security/2020/dsa-4602Third Party Advisory
• https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00210.htmlVendor Advisory
• https://www.oracle.com/security-alerts/cpujul2020.htmlPatch, Third Party Advisory

Published

Nov 14, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-12201Buffer overflow vulnerability in Platform Sample / Silicon R…
• CVE-2018-12202Privilege escalation vulnerability in Platform Sample/ Silic…
• CVE-2018-12203Denial of service vulnerability in Platform Sample/ Silicon …
• CVE-2018-12204Improper memory initialization in Platform Sample/Silicon Re…
• CVE-2018-12205Improper certificate validation in Platform Sample/ Silicon …
• CVE-2018-12206Improper configuration of hardware access in Intel QuickAssi…
• CVE-2018-12208Buffer overflow in HECI subsystem in Intel(R) CSME before ve…
• CVE-2018-12209Insufficient access control in User Mode Driver in Intel(R) …
• CVE-2018-1221In cf-deployment before 1.14.0 and routing-release before 0.…8.1
• CVE-2018-12210Multiple pointer dereferences in User Mode Driver in Intel(R…
• CVE-2018-12211Insufficient input validation in User Mode Driver in Intel(R…
• CVE-2018-12212Buffer overflow in User Mode Driver in Intel(R) Graphics Dri…