PT-2026-24490 · Intel · Intel Uefi Reference Platforms

CVE-2025-20096 · Publicado 2026-03-10 · Atualizado 2026-03-10

Positive Technologies (AI Summary)

CVSS v4.0

5.9

Média

Vetor base

AV:L/AC:H/AT:P/PR:H/UI:A/VC:N/VI:H/VA:H/SC:N/SI:H/SA:H

Name of the Vulnerable Software and Affected Versions Intel Reference Platforms (affected versions not specified)

Description An improper input validation issue exists in the UEFI firmware for some Intel Reference Platforms, potentially allowing for escalation of privilege. A system software adversary with a privileged user account, combined with a high complexity attack, may be able to manipulate data. This requires local access, active user interaction, and does not require special internal knowledge. The issue may impact the integrity and availability of the system.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

LPE

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2025-20096

Produtos afetados

Intel Uefi Reference Platforms

Referências · 4

• https://twitter.com/CVEnew/status/2031504059266404810 · Publicação no Twitter
• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01393.html · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2025-20096 · Nota de Segurança
• https://t.me/CVEtracker/47048 · Publicação no Telegram