CVE-2026-18448: Leak SMM RAM from the kernel (Simply TSA after an SMI)

Published Nov 10, 2026

Updated

EDK2 contains a vulnerability in BIOS where a privileged attacker may cause “Exposure of Sensitive Information during Transient Execution” by local access. Successful exploitation of this vulnerability may result in disclosure of SMRAM contents. It could also impact Confidentiality.

Affected Software

1 affected component

Tianocore edk2

Event History

Nov 10, 2026

CVE Published

via MITRE·06:39 PM

Data Sourced

via MITRE·06:39 PM

DescriptionWeakness

Data Sourced

via NVD·07:21 PM

DescriptionSeverity

Frequently Asked Questions

Who is realistically exposed to this issue?

Systems using Tianocore edk2 are in scope, but exploitation requires a privileged attacker with local access. This is not described as remotely exploitable.

What does an attacker need to exploit it?

The attacker needs local access and high privileges. Exploitation also has high attack complexity and requires an additional precondition, as reflected by AC:H and AT:P.

What is the likely impact if exploitation succeeds?

Successful exploitation may disclose SMRAM contents, affecting confidentiality. The provided impact data does not indicate integrity or availability impact.

CVE-2026-18448: Leak SMM RAM from the kernel (Simply TSA after an SMI)

Affected Software

Event History

Frequently Asked Questions

Who is realistically exposed to this issue?

What does an attacker need to exploit it?

What is the likely impact if exploitation succeeds?

Company

Resources

Contact

Frequently Asked Questions

Who is realistically exposed to this issue?

What does an attacker need to exploit it?

What is the likely impact if exploitation succeeds?