PULSE
FEED
ransomsilentransomgroup reclama a A&O Shearman · GB · Professional Servicesransomsilentransomgroup reclama a J...ransomhyflock reclama a tcadarwin · AU · Otherransombyod reclama a Providence · Healthcareransombyod reclama a Toyota · JP · Manufacturingransomorova reclama a Herminio India Precision Technology · IN · Manufacturingransomkrybit reclama a Actualize Consulting · US · Professional Servicesransomclimax inc reclama a Redacted Redactedransomclimax inc reclama a Nepal Electricity Authority · NP · Energy & Utilitiesransomclimax inc reclama a Frolina Home · BR · Retail & E-Commerceransombooba project reclama a COMPUTER TASK GROUP, Inc. · US · Technologyransombooba project reclama a Georgetown Sleep Center · US · Healthcareransombooba project reclama a Collier Sports Medicine and Orthopedic Center · US · Healthcareransombooba project reclama a El Portal Imaging Center · MX · Healthcareransomsilentransomgroup reclama a A&O Shearman · GB · Professional Servicesransomsilentransomgroup reclama a J...ransomhyflock reclama a tcadarwin · AU · Otherransombyod reclama a Providence · Healthcareransombyod reclama a Toyota · JP · Manufacturingransomorova reclama a Herminio India Precision Technology · IN · Manufacturingransomkrybit reclama a Actualize Consulting · US · Professional Servicesransomclimax inc reclama a Redacted Redactedransomclimax inc reclama a Nepal Electricity Authority · NP · Energy & Utilitiesransomclimax inc reclama a Frolina Home · BR · Retail & E-Commerceransombooba project reclama a COMPUTER TASK GROUP, Inc. · US · Technologyransombooba project reclama a Georgetown Sleep Center · US · Healthcareransombooba project reclama a Collier Sports Medicine and Orthopedic Center · US · Healthcareransombooba project reclama a El Portal Imaging Center · MX · Healthcare
← Todos los CVEs
CVE Watch10 nov 2026

CVE-2026-35500

Stack-based buffer overflow in the UEFI firmware for the Intel(R) Slim Bootloader within Ring 0: Bare Metal OS may allow an escalation of pr

CVSS

—

Sin CVSS

EPSS

—

KEV

—

Exploit Today

0

0-100

Publicado: 10 nov 2026 · Última mod.: 10 nov 2026 · CWE-121

EPSS · 30d

Sin historial EPSS suficiente todavía.

Descripción técnica

Stack-based buffer overflow in the UEFI firmware for the Intel(R) Slim Bootloader within Ring 0: Bare Metal OS may allow an escalation of privilege. Startup code and smm adversary with an unauthenticated user combined with a low complexity attack may enable escalation of privilege. This result may potentially occur via physical access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (high), integrity (high) and availability (high) impacts.

Referencias oficiales
CVEs relacionados
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2026-500803.3 BAJ
—
——0Stack-based Buffer Overflow in the ACPI event handler of the QVM could allow an attacker in a guest to crash the QVM by sending a crafted ACPI request.3h
CVE-2026-1212899.8 CRÍ
—
——0On affected platforms running Arista EOS with BGP configured, a specially crafted packet can cause the BGP agent to crash. Successful exploitation causes the BGP agent process to terminate, resulting in the loss of all BGP sessions on the affected device and possible disruption to network routing until the process recovers. Due to the nature of the vulnerability, it may also be possible for a sophisticated attacker to achieve arbitrary code execution, which could compromise the confidentiality and integrity of the affected system.3h
CVE-2026-961527.8 ALT
—
——0Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.4h
CVE-2026-960667.8 ALT
—
——0Stack-based buffer overflow in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to elevate privileges locally.4h
CVE-2026-959487.8 ALT
—
——0Stack-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.4h
CVE-2026-958896.6 MED
—
——0Untrusted pointer dereference in Windows Storage allows an authorized attacker to elevate privileges with a physical attack.4h