CVE-2026-25194
LowCVSS 1.8Exploitation Probability (EPSS)
Low risk7th percentile - higher than 7% of all known CVEs
Summary
Out-of-bounds write in firmware for Intel(R) Slim Bootloader may allow denial of service. A privileged user with low complexity attack can cause denial of service. The attack requires local access but no user interaction.
Risk Assessment
The risk includes availability impact, potentially leading to disruption of critical services.
Recommendation
Update Intel Slim Bootloader firmware to a patched version and monitor user privileges.
Original NVD description (English source)
Out-of-bounds write in the firmware for the Intel(R) Slim Bootloader may allow a denial of service. System software adversary with a privileged user combined with a low complexity attack may enable denial of service. This result may potentially occur via local access when attack requirements are present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (none) and availability (low) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.