Patch days / March 2026

Intel Platform Update — March 2026

Tuesday, 10 March 2026

Vulnerabilities: 10
Critical: 0
High: 5
Zero-days: 0
Public exploit: 0

Exploited 0

Confirmed exploited (CISA KEV, ENISA). "Zero-day" means exploitation was known by the patch day — install these first.

None of this release's vulnerabilities is known to be exploited so far.

All vulnerabilities 10

High5 Show

High 8.7
CVE-2025-20064 Improper input validation in the UEFI FlashUcAcmSmm module for some Intel(R) reference platforms may allow an escalation of privilege. System software adversar…
High 8.7
CVE-2025-20105 Improper input validation in some UEFI firmware SMM module for the Intel(R) reference platforms may allow an escalation of privilege. System software adversary…
High 7.1
CVE-2025-20027 Improper input validation in the UEFI WheaERST module for some Intel(R) reference platforms may allow an escalation of privilege. System software adversary wit…
High 7.1
CVE-2025-20028 Time-of-check time-of-use race condition in the WheaERST SMM module for some Intel(R) reference platforms may allow an escalation of privilege. System software…
High 7.1
CVE-2025-20068 Improper input validation in the UEFI ImcErrorHandler module for some Intel(R) reference platforms may allow an escalation of privilege. System software advers…

Medium4 Show

Low1 Show

Low 1.8
CVE-2025-20073 Improper buffer restrictions in the UEFI DXE module for some Intel(R) Reference Platforms within UEFI may allow an information disclosure. System software adve…