CVE WatchNov 10, 2026

CVE-2026-55716

Out-of-bounds read in the CheckUefiVgaMode for the Intel(R) Server Board D50DNP and Intel(R) Server Board M50FCP within Ring 0 UEFI may allo

CVSS

—

No CVSS

EPSS

—

KEV

—

Exploit Today

0-100

Published: Nov 10, 2026 · Last modified: Nov 10, 2026 · CWE-125

EPSS · 30d

Not enough EPSS history yet.

Technical description

Out-of-bounds read in the CheckUefiVgaMode for the Intel(R) Server Board D50DNP and Intel(R) Server Board M50FCP within Ring 0 UEFI may allow an information disclosure. Startup code and smm adversary with a privileged user combined with a high complexity attack may enable data exposure. This result may potentially occur via local access when attack requirements are present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (high), integrity (none) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.

Official references

intel.comhttps://intel.com/content/www/us/en/security-center/advisory/intel-sa-01554.html

Related CVEs

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2026-500784.4 MED

—

——0Out-Of-Bounds Read in the MSI-X table in the QVM could allow an attacker in the guest to cause an information disclosure or a crash of the QVM.3h CVE-2026-1212928.2 HIG

—

——0A malformed Error Report can cause EOS to read beyond packet boundaries, potentially terminating the RPKI agent or exposing unintended memory contents through logging.3h CVE-2026-970064.9 MED

—

——0Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information over a network.4h CVE-2026-970027.5 HIG

—

——0Out-of-bounds read in Windows VMSwitch allows an authorized attacker to elevate privileges locally.4h CVE-2026-969895.5 MED

—

——0Out-of-bounds read in Secondary Logon allows an authorized attacker to disclose information locally.4h CVE-2026-969884.9 MED

—

——0Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information over a network.4h