CVE-2024-26022

HIGH 7.8CVE-2024-26022 · Published 14/08/2024 · updated 17/06/2026

In short

CVE-2024-26022 is a HIGH (CVSS 7.8) vulnerability affecting aptio v uefi firmware integrator tools (intel).
Chance of exploitation in the next 30 days (EPSS): 0.16%, higher than 5.1% of all vulnerabilities.
Fix: update to 5.05.04.0008, 5.13.00.2106, 5.13.00.2109, 5.27.06.0019 or later.

Package	Affected versions	Patched versions
aptio v uefi firmware integrator tools intel	`< 5.05.04.0008< 5.13.00.2106< 5.13.00.2109< 5.27.06.0019`	`5.05.04.00085.13.00.21065.13.00.21095.27.06.0019`

Description

Improper access control in some Intel(R) UEFI Integrator Tools on Aptio V for Intel(R) NUC may allow an authenticated user to potentially enable escalation of privilege via local access.

References

intel.com/content/www/us/en/security-center/advisory/intel-sa-01172.html · Vendor Advisory

More vulnerabilities in aptio v uefi firmware integrator tools

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

aptio v uefi firmware integrator tools

intel

< 5.05.04.0008< 5.13.00.2106< 5.13.00.2109< 5.27.06.0019

5.05.04.00085.13.00.21065.13.00.21095.27.06.0019

More vulnerabilities in aptio v uefi firmware integrator tools

See all →