What’s Vulnerable › Vulnerabilities

CVE-2026-79298

• Severity: high (CVSS 8.4 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-09-16 · updated 2026-09-22
• Weakness: CWE-693

Description

An issue in Howyar Technologies Inc SysReturn Versions prior to 11.3.034 and fixed in v.11.3.0.34 allows a local attcker to execute arbitrary code via the BOOTia32.efi and a crafted cloak32.dat file on the ESP.

References

• https://github.com/TheMalwareGuardian/CVE-2026-79298
• https://github.com/TheMalwareGuardian/UEFI-Security-Research-Howyar-SysReturn-NetCopy
• https://github.com/TheMalwareGuardian/UEFI-Security-Research-Howyar-SysReturn-NetCopy

Get alerted when CVE-2026-79298 or the next vulnerability affects your stack