← voltar
CVE-2025-35968

CVE-2025-35968

CVSS 7.1 HIGHEPSS 0.1%CWE-693
Vexday Risk Score
21Baixo
Decisão SSVC (CISA)
Track
Sem sinal de exploração → monitorar
CVSS 7.1EPSS 0.1%KEV nãoPoC Nuclei Metasploit Patch
Ciclo de vida
11 nov 2025Publicada no NVD
Recomendação: Monitorar — sem sinal de exploração no momento.
Protection mechanism failure in the UEFI firmware for the Slim Bootloader within firmware may allow an escalation of privilege. Startup code and smm adversary with a privileged user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.
CVSS:4.0/AV:L/AC:H/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Produtos afetados
n/a · Slim Bootloader

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →