CVE-2026-12855CWE-20

CVE-2026-12855

High · published September 9, 2026

CVSS v3.1
8.2
EPSS
0%
Percentile
2.0
In the wild
Unconfirmed
What it is

Unvalidated memory boundary could result in arbitrary code execution. The vulnerability exists in the code developed specifically for HP projects.

The record
Technical detail
CVSS v3.1
8.2 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00125 · 2.0th percentile
Weakness
CWE-20 · Improper Input Validation
Published
2026-09-09T08:17Z
References (2)
https://www.insyde.com/security-pledge/sa-2026009/ · 8338d8cb-57f7-4252-abc0-96fd13e98d21https://www.kb.cert.org/vuls/id/553437 · af854a3a-2127-422b-91ae-364da2661108
EPSS history
Timeline
  • 10 SEP 03:16Z
    EPSS moved — → 0%
    epss
  • 09 SEP 03:59Z
    H19WMIHandlerSmm: unvalidated memory boundary could result in arbitrary code execution.
    cvelistv5