CVE-2026-0893
MediumCVSS 5.8Summary
AMI APTIOV contains a vulnerability in BIOS where an attacker may cause "Exposure of Sensitive Information to an Unauthorized Actor" by local access. Successful exploitation of this vulnerability can lead to information disclosure, privilege escalation, and further impact on Confidentiality, Integrity, and Availability.
Risk Assessment
Local attack can lead to disclosure of sensitive information, privilege escalation, and compromise of system integrity and availability.
Recommendation
Apply patches provided by AMI for APTIOV. Restrict physical and local access to systems.
Other vulnerabilities in AMI APTIOV
See all- CVE-2025-58774High
AMI APTIOV contains vulnerabilities in BIOS where users may cause “Buffer Access with Incorrect Length Value” by local access. Successful exploitation of this vulnerability could lead to buffer overflows, memory corruption, and arbitrary code execution, and also impact Confidentiality, Integrity, and Availability.
- CVE-2025-58773High
AMI APTIOV contains vulnerabilities in BIOS where users may cause "Out-of-bounds Write" by local access. Successful exploitation of this vulnerability could lead to buffer overflows, memory corruption, and arbitrary code execution, and also impact Confidentiality, Integrity, and Availability.
- CVE-2025-58772High
AMI APTIOV contains a BIOS vulnerability that allows a local user to trigger a classic buffer overflow. Successful exploitation could lead to buffer overflows, memory corruption, and arbitrary code execution.
- CVE-2025-58771High
AMI APTIOV contains a BIOS vulnerability that allows a local user to trigger an integer overflow or wraparound. Successful exploitation could lead to buffer overflows, memory corruption, and arbitrary code execution.
- CVE-2026-33197High
AMI APTIOV contains a vulnerability in BIOS where a privileged user may cause the 'Incomplete List of Disallowed Inputs' by local access. Successful exploitation may lead to arbitrary code execution and impact system Confidentiality, Integrity, and Availability.
Original NVD description (English source)
AMI APTIOV contains a vulnerability in BIOS where an attacker may cause “Exposure of Sensitive Information to an Unauthorized Actor” by local access. Successful exploitation of this vulnerability can lead to information disclosure, privilege escalation, and further impact on Confidentiality, Integrity, and Availability.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS