CVE-2026-0438
MEDIUM
MEDIUM
Priority: 0.01
BB Relevance:
11/100
Published: 2026-05-15
Modified: 2026-10-26
First seen: 2026-10-29
Status: active
Attack Surface
Conf. Impact
Integ. Impact
CVSS Vector Breakdown
AV:
Physical
AC:
High
PR:
High
UI:
Active
S:
X
AT:
Present
VC:
High
VI:
High
VA:
High
Description
A System Management Mode (SMM) handler could perform a callout to code located in non-SMM/untrusted memory. A highly privileged attacker could, with active user interaction and under high complexity and present preconditions, trigger execution of attacker-controlled code in SMM, potentially compromising the system’s confidentiality, integrity, and availability.