CVE-2026-20753

High

Published: 12/05/2026(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

Integer overflow in the UEFI firmware for the Slim Bootloader may allow an escalation of privilege. A system software adversary with privileged access and a low complexity attack may enable local code execution.

Risk Assessment

This vulnerability may significantly impact the confidentiality, integrity, and availability of the system, posing a high risk to the organization.

Recommendation

It is recommended to update the UEFI firmware to the latest version to minimize the risk of privilege escalation.

Other vulnerabilities in Slim Bootloader

CVE-2025-35968Medium
Protection mechanism failure in UEFI firmware for Slim Bootloader may allow privilege escalation. A privileged user with local access and high attack complexity could exploit this without user interaction.

Original NVD description (English source)

Integer overflow in the UEFI firmware for the Slim Bootloader may allow an escalation of privilege. System software adversary with a privileged user combined with a low complexity attack may enable local code execution. This result may potentially occur via local access when attack requirements are present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (high), integrity (high) and availability (high) impacts.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS