VULNERABILITY INTELLIGENCE
CVE-2025-3770
CVSS score7 HIGH
EPSS probability0.16%
CISA KEVNot currently listed
Published2025-08-07
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Description
EDK2 contains a vulnerability in BIOS where an attacker may cause “Protection Mechanism Failure” by local access. Successful exploitation of this vulnerability will lead to arbitrary code execution and impact Confidentiality, Integrity, and Availability.
Weakness classification
- infosec@edk2.groups.io: CWE-693