CVE-2026-66333 · Infrastructure
NO FIX YET
AMI Aptio BIOS firmware contains an out-of-bounds read that a privileged local user can trigger. Successful exploitation may crash the firmware update process or cause a failed update, and could also expose or disrupt data.
first public Nov 10, 2026 · 1 source
Could this affect your app?
Free first check from your website. Connect your repo for the full answer.
Systems running AMI Aptio BIOS firmware, typically server and workstation motherboards. Exploitation requires privileged local access to the machine. The sources do not name affected firmware versions or board vendors.
Not affected if no-local-privileged-access
Who cares ami, aptio, bios, firmware
Unknown from the sources.
No fix yet, per the sources.
AMI APTIOV contains vulnerabilities in BIOS where privileged users may cause the “Out-of-Bounds Read” by local access. Successful exploitation of this vulnerability may lead to a denial of service during firmware update processing, such as a crash or failed update if the out-of-bounds read hits unmapped memory. It could also impact Confidentiality, and Availability.
This page as .md · .json · CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.
Check it with your coding agent
It reads this page and tells you if your code is affected.
Are you affected?
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.