Privilege Escalation Vulnerability in Slim Bootloader UEFI Firmware by Intel

CVE-2025-35968

What is CVE-2025-35968?

A potential vulnerability exists within the UEFI firmware for the Slim Bootloader, allowing local attackers to escalate privileges. This risk arises from a failure in the protection mechanism that can be exploited by malicious users with access to startup code and system management mode (SMM). Exploitation of this vulnerability requires a high level of complexity, but it does not necessitate special internal knowledge or user interaction. If successfully executed, this attack can compromise the confidentiality, integrity, and availability of the affected system, leading to significant implications for system security.

References