BIOS Updates Begin Appearing For New Intel Privilege Escalation Vulnerabilities

[CTTY]

What privileges are needed to execute this attack?
What does 'local user access' mean? I dont think physical access, since server are at risk, but is e.g. JavaScript in the Browser enough local user?

[phoronix]

Phoronix: BIOS Updates Begin Appearing For New Intel Privilege Escalation Vulnerabilities

OEMs have begun releasing updated BIOS/firmware revisions to address new security vulnerabilities disclosed this week by Intel. Most pressing are potential security vulnerabilities within the BIOS reference code used by various Intel CPUs that could lead to privilege escalation by local users and ranked a "high" impact severity...

https://www.phoronix.com/scan.php?page=news_item&px=Intel-November-2021-BIOS