CVE-2022-26006

Severity: medium (CVSS 6.7 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2022-11-11 · updated 2026-06-17
Weakness: CWE-20

Description

Improper input validation in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.

Affected products

Intel Core I5-7640X Firmware: all versions
Intel Core I7-3820 Firmware: all versions
Intel Core I7-3920Xm Firmware: all versions
Intel Core I7-3930K Firmware: all versions
Intel Core I7-3940Xm Firmware: all versions
Intel Core I7-3960X Firmware: all versions
Intel Core I7-3970X Firmware: all versions
Intel Core I7-4820K Firmware: all versions
Intel Core I7-4930K Firmware: all versions
Intel Core I7-4930Mx Firmware: all versions
Intel Core I7-4940Mx Firmware: all versions
Intel Core I7-4960X Firmware: all versions
Intel Core I7-5820K Firmware: all versions
Intel Core I7-5930K Firmware: all versions
Intel Core I7-5960X Firmware: all versions
Intel Core I7-6800K Firmware: all versions
Intel Core I7-6850K Firmware: all versions
Intel Core I7-6900K Firmware: all versions
Intel Core I7-6950X Firmware: all versions
Intel Core I7-7740X Firmware: all versions
Intel Core I7-7800X Firmware: all versions
Intel Core I7-7820X Firmware: all versions
Intel Core I7-9800X Firmware: all versions
Intel Core I9-10900X Firmware: all versions
Intel Core I9-10920X Firmware: all versions
Intel Core I9-10940X Firmware: all versions
Intel Core I9-10980Xe Firmware: all versions
Intel Core I9-7900X Firmware: all versions
Intel Core I9-7920X Firmware: all versions
Intel Core I9-7940X Firmware: all versions

References

Get alerted when CVE-2022-26006 or the next vulnerability affects your stack