CVE-2025-35968

MediumCVSS 6.4

Published: 11/11/2025(UTC)Updated: 19/10/2026(UTC)Translated: 19/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.12%

2th percentile - higher than 2% of all known CVEs

Summary

Protection mechanism failure in UEFI firmware for Slim Bootloader may allow privilege escalation. A privileged user with local access and high attack complexity could exploit this without user interaction.

Risk Assessment

Could lead to privilege escalation at the firmware level, compromising confidentiality, integrity, and availability. Requires high attack complexity but no user interaction.

Recommendation

Update Slim Bootloader firmware to the latest patched version. Monitor for unusual privileged activity.

Other vulnerabilities in Slim Bootloader

CVE-2026-20753High
Integer overflow in the UEFI firmware for the Slim Bootloader may allow an escalation of privilege. A system software adversary with privileged access and a low complexity attack may enable local code execution.

Original NVD description (English source)

Protection mechanism failure in the UEFI firmware for the Slim Bootloader within firmware may allow an escalation of privilege. Startup code and smm adversary with a privileged user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS