Out-of-Bounds Write Vulnerability in Intel Server Boards

CVE-2026-56435

What is CVE-2026-56435?

An out-of-bounds write vulnerability exists in the XmlCliCommonDxe component for the Intel(R) Server Board D50DNP and M50FCP. This flaw may allow an attacker with local access to escalate their privileges and execute arbitrary code within the system context. The attack requires a high level of complexity but does not demand special internal knowledge nor user interaction. If exploited, the vulnerability could severely compromise the system's confidentiality, integrity, and availability, posing a significant threat to the security of the affected systems.

References