5.6Orta

CVE-2026-18448Leak SMM RAM from the kernel (Simply TSA after an SMI)

TianoCore EDK2 Yayım: (4 gün önce)

Açıklama

EDK2 contains a vulnerability in BIOS where a privileged attacker may cause “Exposure of Sensitive Information during Transient Execution” by local access. Successful exploitation of this vulnerability may result in disclosure of SMRAM contents. It could also impact Confidentiality.

Zayıflık türü (CWE): CWE-1420

Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.

Etkilenen ürünler ve sürümler

ÜreticiÜrünSürümler
TianoCore EDK2 ≤ edk2-stable202608

Kaynaklar ve yamalar