Skip to content
NewA calmer, faster ZeroHour
Vulnerability2

CVE-2025-3052

CVSS 3.1
8.2 high
EPSS
<1%p34
Published
·
Modified
Analyze CVE-2025-3052 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

An arbitrary write vulnerability in Microsoft signed UEFI firmware allows for code execution of untrusted software. This allows an attacker to control its value, leading to arbitrary memory writes, including modification of critical firmware settings stored in NVRAM. Exploiting this vulnerability could enable security bypasses, persistence mechanisms, or full system compromise.

Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
NVD CVE.org GitHub PoCs EPSS (0.4%)

In the news

4 stories