CVE-2026-14968TianoCore EDK2 <= edk2-stable202608 Out-of-bounds Write
NVD
Vulnerability Summary
EDK2 contains vulnerabilities in
BIOS where skilled and privileged users or attackers may cause “Out-of-bounds Write” by local access. Successful exploitation of this vulnerability could compromise
SMM handler integrity, cause system instability, and lead to denial of service. It could also impact Integrity and Availability.
BIOS where skilled and privileged users or attackers may cause “Out-of-bounds Write” by local access. Successful exploitation of this vulnerability could compromise
SMM handler integrity, cause system instability, and lead to denial of service. It could also impact Integrity and Availability.
CVSS v4.0 Base Metrics — Score 7.0 (HIGH)
CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:H/VA:H/SC:N/SI:H/SA:HAttack VectorLocal
Attack ComplexityLow
Attack RequirementsPresent
Privileges RequiredHigh
User InteractionNone
Confidentiality (Vulnerable System)None
Integrity (Vulnerable System)High
Availability (Vulnerable System)High
Confidentiality (Subsequent System)None
Integrity (Subsequent System)High
Availability (Subsequent System)High
Affected & Patched Versions
- TianoCore EDK2 <= edk2-stable202608
- TianoCore EDK2 edk2-stable202608
What to do
Plan remediation soon. No exploitation is confirmed yet, but the severity is high.
- Check whether you run TianoCore EDK2 <= edk2-stable202608 and which version.
- Update to a patched version listed above, then confirm the new version.
Timeline
- Nov 10, 2026Published
- Nov 10, 2026Record last modified
Score, severity and exploitation changes are tracked from the day Watchtower started logging them.
Get notified about new TianoCore EDK2 <= edk2-stable202608 CVEsYou are reading CVE-2026-14968. Get an email when KEV listings, exploits or new CVEs match your stack.
Set up CVE alertsExternal References
Data last checked: Nov 14, 2026 03:32 UTC