CVE-2024-36355 HIGH

CVE-2024-36355

Weakness CWE-787
Published February 10, 2026
Last update February 26, 2026
View on NVD All CVEs

CVSS base score

7.0/10
Attack vector Local
Attack complexity High
Privileges required High
User interaction None
Confidentiality —
Integrity —

CVSS vector

CVSS:4.0/AV:L/AC:H/AT:P/PR:H/UI:N/VC:N/VI:H/VA:N/SC:H/SI:H/SA:H

What the vulnerability does

01Description

Improper input validation in the SMM handler could allow an attacker with Ring0 access to write to SMRAM and modify execution flow for S3 (sleep) wake up, potentially resulting in arbitrary code execution.

Key dates

02Disclosure timeline

February 10, 2026 CVE published
February 26, 2026 Record updated