CVE Catalog

CVE-2026-6484

HighCVSS 8.2
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.14%

4th percentile - higher than 4% of all known CVEs

Summary

In UEFI firmware, lack of verified boot for certain firmware volumes (FV) may allow arbitrary code execution.

Risk Assessment

An attacker could gain control over the boot process, leading to full device compromise.

Recommendation

Install available UEFI firmware updates from the vendor that enforce verified boot for all volumes.

Original NVD description (English source)

In an UEFI, Lack of verified boot to certain FV may cause arbitrary code execution.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS