EDK2 contains a vulnerability in BIOS where a privileged attacker may cause “Exposure of Sensitive Information…

NO FIX YET

Not triaged yet. The sources’ own description is below.

first public Nov 10, 2026 · 1 source

Could this affect your app?

Free first check from your website. Connect your repo for the full answer.

01 · Who is affected

No product ranges from the sources yet.

02 · How to check

Unknown from the sources.

03 · The fix

Unknown from the sources.

Exploited: No reports yet
Public exploit: None on GitHub
EPSS: Not scored
Last updated: Nov 10, 2026

What the sources say, verbatim

283 characters

EDK2 contains a vulnerability in BIOS where a privileged attacker may cause “Exposure of Sensitive Information during Transient Execution” by local access. Successful exploitation of this vulnerability may result in disclosure of SMRAM contents. It could also impact Confidentiality.

Sources and references

NVD: CVE-2026-18448Nov 10, 2026
Vendor advisory: github.comAdvisory · github.com

This page as .md · .json · CVSS:4.0/AV:L/AC:H/AT:P/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.

Check it with your coding agent

It reads this page and tells you if your code is affected.

Claude CodeCodexCursorAdd to your agent

Are you affected?

Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.

InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.

Run the check