Skip to content
OpenAdvisories
Medium · 5.6 CVE-2026-18448 EUVD-2026-122789

Leak SMM RAM from the kernel (Simply TSA after an SMI)

Published Nov 10, 2026 · Assigned by TianoCore

Description

EDK2 contains a vulnerability in BIOS
where a privileged attacker may cause “Exposure of Sensitive Information during
Transient Execution” by local access. Successful exploitation of
this vulnerability may result in disclosure of SMRAM contents. It could also impact Confidentiality.

Affected products

VendorProductAffectedFixed
TianoCore EDK2 ≤ edk2-stable202608 —

Advisories 1

References