Untrusted Pointer Dereference Vulnerability in Intel Slim Bootloader
CVE-2026-50175

8.4HIGH

Key Information:

Vendor

Intel
Status
Intel(r) Slim Bootloader
Vendor
CVE Published:
10 November 2026

What is CVE-2026-50175?

An untrusted pointer dereference vulnerability exists in the FirmwareWakingVector for the Intel Slim Bootloader, which operates within Ring 0 of the Bare Metal OS. This flaw could allow an adversary with local access and certain privileges to potentially escalate privileges. The exploit does not require user interaction and can be executed with a low complexity attack, raising concerns about the system's confidentiality, integrity, and availability. Those affected by this vulnerability should apply available patches to mitigate risk.

Affected Version(s)

Intel(R) Slim Bootloader See references

References

https://intel.com/content/www/us/en/security-center/advis...

CVSS V4

Score:
8.4
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.