CVE-2021-39301
HighCVSS 8.8Exploitation Probability (EPSS)
Low risk36th percentile - higher than 36% of all known CVEs
Summary
Potential vulnerabilities have been identified in UEFI firmware (BIOS) for some PC products, which may allow privilege escalation and arbitrary code execution.
Risk Assessment
Risk of system compromise by malware or an attacker with local access.
Recommendation
Update BIOS firmware to the latest version provided by the manufacturer.
Other vulnerabilities in UEFI firmware
See all- CVE-2021-43614Medium
Error in handling the PlatformLangCodes UEFI variable could cause a buffer overflow, leading to resource exhaustion and failure.
- CVE-2021-39300High
Potential vulnerabilities have been identified in UEFI firmware (BIOS) for some PC products which may allow escalation of privilege and arbitrary code execution.
- CVE-2021-39299High
Potential vulnerabilities have been identified in UEFI firmware (BIOS) for some PC products which may allow escalation of privilege and arbitrary code execution.
- CVE-2021-39297High
Potential vulnerabilities have been identified in UEFI firmware (BIOS) for some PC products, which may allow privilege escalation and arbitrary code execution.
Original NVD description (English source)
Potential vulnerabilities have been identified in UEFI firmware (BIOS) for some PC products which may allow escalation of privilege and arbitrary code execution.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS