CVE-2026-184485.6Medium
CVE-2026-18448: Leak SMM RAM from the kernel (Simply TSA after an SMI)
TianoCore · EDK2
No fix listed · Affected: TianoCore EDK2 · Exploitation: not established
ExploitationNot established
Not in CISA KEV as of catalogue 2026.11.13 (13 Nov)
- In CISA KEV: not seen
- Exploited (reported): not seen
- Scanning observed: not seen
- Proof of concept public: not seen
- Not establishedNothing in the sources we check
0.1%probability of exploitation in the next 30 days
2nd percentile
050100
Higher than 2% of scored CVEs
5.6MediumCVSS
LowMediumHighCrit.
DescriptionNVD
EDK2 contains a vulnerability in BIOS where a privileged attacker may cause “Exposure of Sensitive Information during Transient Execution” by local access. Successful exploitation of this vulnerability may result in disclosure of SMRAM contents. It could also impact Confidentiality.
CoverageNo articles yet
No CyberSIXT article names CVE-2026-18448 yet. New articles appear here and in the RSS feed.