CVE-2023-26299: vulnerability in HP PC products using AMI UEFI Firmware
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
3Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackepss 0.1%
A potential Time-of-Check to Time-of-Use (TOCTOU) vulnerability has been identified in certain HP PC products using AMI UEFI Firmware (system BIOS), which might allow arbitrary code execution. AMI has released updates to mitigate the potential vulnerability.
Affected products
HP Inc. · HP PC products using AMI UEFI FirmwareRelated CVEs — HP PC products using AMI UEFI Firmware
In the same product, most dangerous first.