https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 13 Nov 2026 22:46:53 +0000 https://db.gcve.eu/vuln/fkie_cve-2026-18448 <p>EDK2 contains a vulnerability in BIOS where a privileged attacker may cause “Exposure of Sensitive Information during Transient Execution” by local access. Successful exploitation of this vulnerability may result in disclosure of SMRAM contents. It could also impact Confidentiality.</p> <p>EDK2 contains a vulnerability in BIOS where a privileged attacker may cause “Exposure of Sensitive Information during Transient Execution” by local access. Successful exploitation of this vulnerability may result in disclosure of SMRAM contents. It could also impact Confidentiality.</p> https://db.gcve.eu/vuln/fkie_cve-2026-18448 https://db.gcve.eu/vuln/msrc_cve-2026-18448 msrc_CVE-2026-18448 https://db.gcve.eu/vuln/msrc_cve-2026-18448 https://db.gcve.eu/vuln/ubuntu-cve-2026-18448 <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: edk2, Ubuntu:Pro:18.04:LTS: edk2, Ubuntu:Pro:20.04:LTS: edk2, Ubuntu:22.04:LTS: edk2, Ubuntu:24.04:LTS: edk2, Ubuntu:26.10: edk2, Ubuntu:26.10: edk2-hwe, Ubuntu:26.04:LTS: edk2, Ubuntu:26.04:LTS: edk2-hwe</p> <p>Insufficient Transient Scheduler Attack (TSA) mitigations in EDK II could allow a ring-0 attacker to infer residual microarchitectural state left by SMM execution, potentially resulting in disclosure of SMRAM contents.</p> <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: edk2, Ubuntu:Pro:18.04:LTS: edk2, Ubuntu:Pro:20.04:LTS: edk2, Ubuntu:22.04:LTS: edk2, Ubuntu:24.04:LTS: edk2, Ubuntu:26.10: edk2, Ubuntu:26.10: edk2-hwe, Ubuntu:26.04:LTS: edk2, Ubuntu:26.04:LTS: edk2-hwe</p> <p>Insufficient Transient Scheduler Attack (TSA) mitigations in EDK II could allow a ring-0 attacker to infer residual microarchitectural state left by SMM execution, potentially resulting in disclosure of SMRAM contents.</p> https://db.gcve.eu/vuln/ubuntu-cve-2026-18448 https://db.gcve.eu/vuln/wid-sec-w-2026-4473 <p>Ein Angreifer kann mehrere Schwachstellen in AMD Prozessor und AMD Radeon ausnutzen, um seine Privilegien zu erhöhen, beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren oder offenzulegen oder einen Denial-of-Service-Zustand auszulösen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in AMD Prozessor und AMD Radeon ausnutzen, um seine Privilegien zu erhöhen, beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren oder offenzulegen oder einen Denial-of-Service-Zustand auszulösen.</p> https://db.gcve.eu/vuln/wid-sec-w-2026-4473