CVE-2026-18448
Leak SMM RAM from the kernel (Simply TSA after an SMI)
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
EDK2 contains a vulnerability in BIOS where a privileged attacker may cause “Exposure of Sensitive Information during Transient Execution” by local access. Successful exploitation of this vulnerability may result in disclosure of SMRAM contents. It could also impact Confidentiality.
| CWE | CWE-1420 |
| Vendor | tianocore |
| Product | edk2 |
| Published | Nov 10, 2026 |
Stay Ahead of the Next One
Get instant alerts for tianocore edk2
Be the first to know when new unknown vulnerabilities affecting tianocore edk2 are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
TianoCore / EDK2
0 ≤ edk2-stable202608
References
Credits
🔍 Abdul Lateef Attar