CVE-2025-3770: SMM IDT Privilege Escalation Vulnerability
EDK2 contains a vulnerability in BIOS where an attacker may cause “Protection Mechanism Failure” by local access. Successful exploitation of this vulnerability will lead to arbitrary code execution and impact Confidentiality, Integrity, and Availability.
Other sources
SMM IDT Privilege Escalation Vulnerability
— Microsoft
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-3770?
CVE-2025-3770 has a high severity rating due to its potential for arbitrary code execution.
How do I fix CVE-2025-3770?
To fix CVE-2025-3770, update your EDK2 firmware to the latest version that addresses this vulnerability.
Who is affected by CVE-2025-3770?
CVE-2025-3770 affects systems utilizing the EDK2 firmware.
What kind of impact can CVE-2025-3770 have?
CVE-2025-3770 can impact Confidentiality, Integrity, and Availability due to potential code execution.
Is CVE-2025-3770 exploit easily accessible?
Exploitation of CVE-2025-3770 requires local access, making it dependent on an attacker’s proximity to the system.