CVE-2025-3770CWE-693

SMM IDT Privilege Escalation Vulnerability

High · published August 7, 2025

CVSS v3.1
7.0
EPSS
0%
Percentile
4.1
In the wild
Unconfirmed
What it is

EDK2 contains a vulnerability in BIOS where an attacker may cause “Protection Mechanism Failure” by local access. Successful exploitation of this vulnerability will lead to arbitrary code execution and impact Confidentiality, Integrity, and Availability.

The record
Technical detail
CVSS v3.1
7.0 · HIGH
Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00153 · 4.1th percentile
Weakness
CWE-693 · Protection Mechanism Failure
Published
2025-08-07T00:42Z
EPSS history
Timeline
  • 07 AUG 00:42Z
    SMM IDT Privilege Escalation Vulnerability
    cvelistv5