https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-13T23:24:04.361973+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-18448 fkie_cve-2026-18448 2026-11-13T23:24:04.364850+00:00

EDK2 contains a vulnerability in BIOS where a privileged attacker may cause “Exposure of Sensitive Information during Transient Execution” by local access. Successful exploitation of this vulnerability may result in disclosure of SMRAM contents. It could also impact Confidentiality.

 https://db.gcve.eu/vuln/msrc_cve-2026-18448 msrc_CVE-2026-18448 — Leak SMM RAM from the kernel (Simply TSA after an SMI) 2026-11-13T23:24:04.364979+00:00 msrc_CVE-2026-18448 https://db.gcve.eu/vuln/ubuntu-cve-2026-18448 UBUNTU-CVE-2026-18448 2026-11-13T23:24:04.365013+00:00

Affected: Ubuntu:Pro:16.04:LTS: edk2, Ubuntu:Pro:18.04:LTS: edk2, Ubuntu:Pro:20.04:LTS: edk2, Ubuntu:22.04:LTS: edk2, Ubuntu:24.04:LTS: edk2, Ubuntu:26.10: edk2, Ubuntu:26.10: edk2-hwe, Ubuntu:26.04:LTS: edk2, Ubuntu:26.04:LTS: edk2-hwe

Insufficient Transient Scheduler Attack (TSA) mitigations in EDK II could allow a ring-0 attacker to infer residual microarchitectural state left by SMM execution, potentially resulting in disclosure of SMRAM contents.

 https://db.gcve.eu/vuln/wid-sec-w-2026-4473 WID-SEC-W-2026-4473 — AMD Prozessor und AMD Radeon: Mehrere Schwachstellen 2026-11-13T23:24:04.365051+00:00

Ein Angreifer kann mehrere Schwachstellen in AMD Prozessor und AMD Radeon ausnutzen, um seine Privilegien zu erhöhen, beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren oder offenzulegen oder einen Denial-of-Service-Zustand auszulösen.