CVE-2020-26186

Severity: medium (CVSS 6.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2021-01-08 · updated 2026-06-17
Weakness: CWE-642

Description

Dell Inspiron 5675 BIOS versions prior to 1.4.1 contain a UEFI BIOS RuntimeServices overwrite vulnerability. A local attacker with access to system memory may exploit this vulnerability by overwriting the RuntimeServices structure to execute arbitrary code in System Management Mode (SMM).

Affected products

Dell Inspiron 5675 Firmware: before 1.4.1 — fixed in 1.4.1

How to fix

Upgrade to a fixed version: Dell Inspiron 5675 Firmware 1.4.1. Check the vendor advisory for mitigations.

References

https://www.dell.com/support/kbdoc/en-us/000180645/dsa-2020-247-dell-client-platform-security-update-for-uefi-bios-runtimeservices-overwrite-vulnerability
https://www.dell.com/support/kbdoc/en-us/000180645/dsa-2020-247-dell-client-platform-security-update-for-uefi-bios-runtimeservices-overwrite-vulnerability

Get alerted when CVE-2020-26186 or the next vulnerability affects your stack