CVE-2024-33656 in AptioV

摘要

由 MITRE • 2024-08-21

The DXE module SmmComputrace contains a vulnerability that allows local attackers to leak stack or global memory. This could lead to privilege escalation, arbitrary code execution, and bypassing OS security mechanisms

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• 负责: AMI
• 预定: 2024-04-25
• 披露: 2024-08-21
• 管理: 已接受
• 条目: VDB-275442
• CPE: 准备好
• CWE: CWE-269 (已确认)
• CVSS: 7.8 (CNA)
• EPSS: 0.00162
• KEV: 否
• 活动: 非常低

来源

• MITRE: https://www.cve.org/CVERecord?id=CVE-2024-33656
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2024-33656
• CVE Details: https://www.cvedetails.com/cve/CVE-2024-33656/