CVE-2026-28729CWE-190

CVE-2026-28729

published August 11, 2026

CVSS
2.4
EPSS
0%
Percentile
3.9
In the wild
Unconfirmed
What it is

Integer overflow in the UEFI firmware for the Intel(R) Slim Bootloader may allow an information disclosure. System software adversary with an authenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires active user interaction. The potential vulnerability may impact the confidentiality (low), integrity (none) and availability (low) of the vulnerable system, resulting in subsequent system confidentiality (low), integrity (none) and availability (low) impacts.

The record
Technical detail
CVSS
2.4 · NONE
CVSS v4.0
Not supplied
EPSS
0.00150 · 3.9th percentile
Weakness
CWE-190 · Integer Overflow or Wraparound
Published
2026-08-11T21:17Z
References (1)
EPSS history
Timeline
  • 11 AUG 16:27Z
    Integer overflow in the UEFI firmware for the Intel(R) Slim Bootloader may allow an information disclosure
    cvelistv5