CVE search · CVE-2026-14968
CVE-2026-14968
high 7.0
EDK2 contains vulnerabilities in BIOS where skilled and privileged users or attackers may cause “Out-of-bounds Write” by local access. Successful exploitation of this vulnerability could compromise SMM handler integrity, cause system instability, and lead to denial of service. It could also impact Integrity and Availability.
Details
- Status
- Received
- Published
- Last changed
- Source
- infosec@edk2.groups.io
- Weakness
- CWE-787
Severity
| Version | Score | Vector | Source |
|---|---|---|---|
| CVSS 4.0 | high 7.0 | CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:H/VA:H/SC:N/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X |
infosec@edk2.groups.ioSecondary |