PT-2025-46437 · Unknown · Slim Bootloader

Published 2025-11-11 · Updated 2025-11-11 · CVE-2025-35968

Positive Technologies (AI Summary)

CVSS v3.1

6.4

Medium

Base vector

AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions UEFI firmware with Slim Bootloader (affected versions not specified)

Description A flaw exists in the UEFI firmware for the Slim Bootloader that could allow for privilege escalation. A local attacker with privileged user access and high complexity attack conditions may exploit this issue. The potential impact includes high confidentiality, integrity, and availability risks to the system. The vulnerability does not require user interaction or special internal knowledge to exploit.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Protection Mechanism Failure

Weakness Enumeration

CWE-693

Related Identifiers

CVE-2025-35968

Affected Products

Slim Bootloader

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2025-35968 · Security Note
• https://twitter.com/CVEnew/status/1988303444432875645 · Twitter Post
• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01395.html · Note