CVE-2021-39299
HighCVSS 8.8Exploitation Probability (EPSS)
Low risk35th percentile - higher than 35% of all known CVEs
Summary
Potential vulnerabilities have been identified in UEFI firmware (BIOS) for some PC products which may allow escalation of privilege and arbitrary code execution.
Risk Assessment
The risk includes the possibility of an unauthorized user gaining control over the system, which may lead to full device compromise.
Recommendation
It is recommended to update the firmware (BIOS/UEFI) to the latest version provided by the manufacturer and to monitor security advisories.
Other vulnerabilities in UEFI firmware
See all- CVE-2021-43614Medium
Error in handling the PlatformLangCodes UEFI variable could cause a buffer overflow, leading to resource exhaustion and failure.
- CVE-2021-39301High
Potential vulnerabilities have been identified in UEFI firmware (BIOS) for some PC products, which may allow privilege escalation and arbitrary code execution.
- CVE-2021-39300High
Potential vulnerabilities have been identified in UEFI firmware (BIOS) for some PC products which may allow escalation of privilege and arbitrary code execution.
- CVE-2021-39297High
Potential vulnerabilities have been identified in UEFI firmware (BIOS) for some PC products, which may allow privilege escalation and arbitrary code execution.
Original NVD description (English source)
Potential vulnerabilities have been identified in UEFI firmware (BIOS) for some PC products which may allow escalation of privilege and arbitrary code execution.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS