VYPR

UEFI firmware

by Microsoft

CVEs (1)

  • CVE-2025-3052HigJun 10, 2025
    risk 0.53cvss 8.2epss 0.00

    An arbitrary write vulnerability in Microsoft signed UEFI firmware allows for code execution of untrusted software. This allows an attacker to control its value, leading to arbitrary memory writes, including modification of critical firmware settings stored in NVRAM. Exploiting…