CVE-2022-26837

Severity: high (CVSS 7.0 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2023-02-16 · updated 2026-06-17
Weakness: CWE-20

Description

Improper input validation in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.

Affected products

Intel Core I3-11100He Firmware: all versions
Intel Core I3-1110G4 Firmware: all versions
Intel Core I3-1115G4 Firmware: all versions
Intel Core I3-1115G4E Firmware: all versions
Intel Core I3-1115Gre Firmware: all versions
Intel Core I3-1120G4 Firmware: all versions
Intel Core I3-1125G4 Firmware: all versions
Intel Core I5-11260H Firmware: all versions
Intel Core I5-11300H Firmware: all versions
Intel Core I5-1130G7 Firmware: all versions
Intel Core I5-11320H Firmware: all versions
Intel Core I5-1135G7 Firmware: all versions
Intel Core I5-11400 Firmware: all versions
Intel Core I5-11400F Firmware: all versions
Intel Core I5-11400H Firmware: all versions
Intel Core I5-11400T Firmware: all versions
Intel Core I5-1140G7 Firmware: all versions
Intel Core I5-1145G7 Firmware: all versions
Intel Core I5-1145G7E Firmware: all versions
Intel Core I5-1145Gre Firmware: all versions
Intel Core I5-11500 Firmware: all versions
Intel Core I5-11500H Firmware: all versions
Intel Core I5-11500He Firmware: all versions
Intel Core I5-11500T Firmware: all versions
Intel Core I5-1155G7 Firmware: all versions
Intel Core I5-11600 Firmware: all versions
Intel Core I5-11600K Firmware: all versions
Intel Core I5-11600Kf Firmware: all versions
Intel Core I5-11600T Firmware: all versions
Intel Core I7-11370H Firmware: all versions

References

Get alerted when CVE-2022-26837 or the next vulnerability affects your stack