CVE-2021-26316

Failure to validate the communication buffer and communication service in the BIOS may allow an attacker to tamper with the buffer resulting in potential SMM…

High · published January 10, 2023

CVSS v3.1
7.8
EPSS
0%
Percentile
17.8
In the wild
Unconfirmed
What it is

Failure to validate the communication buffer and communication service in the BIOS may allow an attacker to tamper with the buffer resulting in potential SMM (System Management Mode) arbitrary code execution.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00267 · 17.8th percentile
Published
2023-01-10T19:46Z
EPSS history
Timeline
  • 10 JAN 19:46Z
    Failure to validate the communication buffer and communication service in the BIOS may allow an attacker to tamper with the buffer resulting in potential SMM…
    cvelistv5