40. AuthVariable Timestamp Zeroing on APPEND_WRITE
Logic issue in variable service module for EDK II/UDK2018/UDK2017/UDK2015 may allow an authenticated user to potentially enable escalation of privilege, information disclosure and/or denial of service via local access.
Escalation of Privilege, Information Disclosure and/or Denial of Service
Medium 6.7 CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
EDK II commits:
Intel Team
CVE-2018-3613
Last modified 2yr ago