← Database

CVE-2022-26861

HIGH CVSS: 7.9 Published: 2022-09-06 Modified: 2026-06-17

Description

Dell BIOS versions contain an Insecure Automated Optimization vulnerability. A local authenticated malicious user could exploit this vulnerability by sending malicious input via SMI to obtain arbitrary code execution during SMM.

Affected Platforms

Dell Latitude 3400 FirmwareDell Inspiron 7510 FirmwareDell Optiplex 5055Dell Inspiron 5409Dell Xps 13 9380Dell Inspiron 7573 FirmwareDell Optiplex 7780 All-In-OneDell Inspiron 3580Dell Latitude 3120Dell Vostro 3890

Weakness Type

CWE-1038, NVD-CWE-Other

References