← Database

CVE-2022-26860

HIGH CVSS: 7.5 Published: 2022-09-06 Modified: 2026-06-17

Description

Dell BIOS versions contain a stack-based buffer overflow vulnerability. A local attacker could exploit this vulnerability by sending malicious input via SMI to bypass security checks resulting in arbitrary code execution in SMM.

Affected Platforms

Dell Latitude 3400 FirmwareDell Inspiron 7510 FirmwareDell Optiplex 5055Dell Inspiron 5409Dell Xps 13 9380Dell Inspiron 7573 FirmwareDell Optiplex 7780 All-In-OneDell Inspiron 3580Dell Latitude 3120Dell Vostro 3890

Weakness Type

CWE-121, CWE-787

References