What the vulnerability does
01Description
Improper input validation for some Intel(R) BIOS firmware may allow a privileged user to potentially enable escalation of privilege via local access.
CVSS base score
7.2/10
CVSS vector
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:N
Key dates
02Disclosure timeline
May 10, 2023
CVE published
January 27, 2025
Record updated
External resources
03References
Related vulnerabilities
04Related CVE
CVE-2026-7953
CVE-2024-21631 Integer overflow in URI leading to potential host spoofing
CVE-2024-9407 Buildah: podman: improper input validation in bind-propagation option of dockerfile run --mount instruction
CVE-2020-29021 Scripting tag chars < > not filtered in input fields could cause Cross-Site Scripting (XSS)
CVE-2025-20393 Cisco Secure Email Gateway and Cisco Secure Email and Web Manager Remote Command Execution Vulnerability
