CVE-2026-20712

Name of the Vulnerable Software and Affected Versions Intel(R) reference platforms UEFI firmware (affected versions not specified)

Description Incomplete cleanup within the UEFI firmware may allow an information disclosure. A privileged system software adversary can exploit this via local access using a low complexity attack to enable data exposure. This process requires no user interaction or special internal knowledge and results in a high impact on system confidentiality.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.