CVE-2026-14968
Published:November 10, 2026
Updated:November 13, 2026
EDK2 contains vulnerabilities in
BIOS where skilled and privileged users or attackers may cause āOut-of-bounds Writeā by local access. Successful exploitation of this vulnerability could compromise
SMM handler integrity, cause system instability, and lead to denial of service. It could also impact Integrity and Availability.
Related ResourcesĀ (1)
Do you need more information?
Contact UsCVSS v4
Base Score:
7
Attack Vector
LOCAL
Attack Complexity
LOW
Attack Requirements
PRESENT
Privileges Required
HIGH
User Interaction
NONE
Vulnerable System Confidentiality
NONE
Vulnerable System Integrity
HIGH
Vulnerable System Availability
HIGH
Subsequent System Confidentiality
NONE
Subsequent System Integrity
HIGH
Subsequent System Availability
HIGH
CVSS v3
Base Score:
7.9
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
CHANGED
Confidentiality
NONE
Integrity
HIGH
Availability
HIGH
Weakness Type (CWE)
Out-of-bounds Write
EPSS
Base Score:
0.12