CVE-2026-6484: Lack of verified boot to certain FV may cause arbitrary code execution
In an UEFI, Lack of verified boot to certain FV may cause arbitrary code execution.
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Compensating control
Mitigate the risk of arbitrary code execution caused by lack of verified boot to certain Firmware Volumes (FVs) by enabling/ensuring UEFI verified boot coverage for the affected FVs.
Event History
Frequently Asked Questions
What is the severity of CVE-2026-6484?
CVE-2026-6484 has a severity rating of 8.2, classified as high.
What kind of risk is associated with CVE-2026-6484?
CVE-2026-6484 presents a high risk due to its potential for arbitrary code execution.
How can I mitigate CVE-2026-6484?
To mitigate CVE-2026-6484, ensure that verified boot is enabled and properly configured on impacted UEFI systems.
What systems are affected by CVE-2026-6484?
CVE-2026-6484 affects systems utilizing certain firmware volumes that do not implement verified boot.
What impact does CVE-2026-6484 have on system security?
CVE-2026-6484 can lead to unauthorized access and control of affected systems due to arbitrary code execution.