VULNERABILITY INTELLIGENCE
CVE-2026-0438
EPSS probability0.14%
CISA KEVNot currently listed
Published2026-05-15
Last modified2026-10-26
Description
A System Management Mode (SMM) handler could perform a callout to code located in non-SMM/untrusted memory. A highly privileged attacker could, with active user interaction and under high complexity and present preconditions, trigger execution of attacker-controlled code in SMM, potentially compromising the system’s confidentiality, integrity, and availability.
Weakness classification
- psirt@amd.com: CWE-1072