What the vulnerability does
01Description
Improper initialization of variables in the DXE driver may allow a privileged user to leak sensitive information via local access.
CVSS base score
—
Key dates
02Disclosure timeline
September 20, 2023
CVE published
June 27, 2025
Record updated
External resources
