UEFI Firmware Vulnerability May Allow Privileged User Escalation

CVE-2023-42772

What is CVE-2023-42772?

A vulnerability exists in the UEFI firmware of certain Intel reference processors that can allow a privileged user to exploit untrusted pointer dereference. This can potentially lead to escalation of privilege with local access. As the firmware is integral to system initialization and operations, any exploitation could severely compromise the integrity and security of systems reliant on the affected firmware versions.

References