EDK2 contains vulnerabilities in BIOS where skilled and privileged users or attackers may cause “Out-of-bounds…

NO FIX YET

Not triaged yet. The sources’ own description is below.

first public Nov 3, 2026 · 1 source

Could this affect your app?

Free first check from your website. Connect your repo for the full answer.

01 · Who is affected

No product ranges from the sources yet.

02 · How to check

Unknown from the sources.

03 · The fix

Unknown from the sources.

Exploited: No reports yet
Public exploit: None on GitHub
EPSS: Not scored
Last updated: Nov 10, 2026

What the sources say, verbatim

326 characters

EDK2 contains vulnerabilities in BIOS where skilled and privileged users or attackers may cause “Out-of-bounds Write” by local access. Successful exploitation of this vulnerability could compromise SMM handler integrity, cause system instability, and lead to denial of service. It could also impact Integrity and Availability.

Sources and references

NVD: CVE-2026-14968Nov 10, 2026
Vendor advisory: github.comAdvisory · github.com

This page as .md · .json · CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:H/VA:H/SC:N/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.

Check it with your coding agent

It reads this page and tells you if your code is affected.

Claude CodeCodexCursorAdd to your agent

Are you affected?

Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.

InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.

Run the check