---
id: "CVE-2026-18448"
page: "https://infrastack.ai/live/CVE-2026-18448"
kind: "vulnerability"
aliases: ["CVE-2026-18448"]
title: "EDK2 BIOS firmware flaw lets a privileged local user read SMRAM"
severity: "medium"
cvss: 5.6
epss: null
exploited: false
status: "open"
category: "infrastructure"
products: []
ecosystems: []
tags: ["bios", "edk2", "firmware", "infrastructure", "uefi"]
not_affected_if: ["remote-only-attack-surface"]
published_at: "2026-11-10T19:21:15+00:00"
first_seen_at: "2026-11-10T19:25:15+00:00"
updated_at: "2026-11-10T20:00:17+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-18448", "first_seen_at": "2026-11-10T19:25:15+00:00"}]
exploit_sources: []
---

# EDK2 BIOS firmware flaw lets a privileged local user read SMRAM

Link for people: https://infrastack.ai/live/CVE-2026-18448 (this .md is for agents)

EDK2, the open-source UEFI firmware code used in many computers' BIOS, has a transient-execution flaw that lets a privileged attacker with local access leak sensitive information. Successful exploitation can disclose SMRAM contents, which are protected system-management memory.

_Summary, check and fix written by a model from the sources; labelled as such._

## Timeline

- 2026-11-10T19:25:15+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-18448

## Documents

- [advisory] Vendor advisory: github.com https://github.com/tianocore/edk2/security/advisories/GHSA-7v86-66vf-h88j

## From the sources

EDK2 contains a vulnerability in BIOS
where a privileged attacker may cause “Exposure of Sensitive Information during
Transient Execution” by local access. Successful exploitation of
this vulnerability may result in disclosure of SMRAM contents. It could also impact Confidentiality.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_