VulnerabilityDeferred

CVE-2025-3052

An arbitrary write vulnerability in Microsoft signed UEFI firmware allows for code execution of untrusted software.

HIGH 8.2EPSS 0.43%

Does this matter?

High impact if exploited, but EPSS currently rates exploitation as unlikely (0.43%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.

Description

An arbitrary write vulnerability in Microsoft signed UEFI firmware allows for code execution of untrusted software. This allows an attacker to control its value, leading to arbitrary memory writes, including modification of critical firmware settings stored in NVRAM. Exploiting this vulnerability could enable security bypasses, persistence mechanisms, or full system compromise.

CVSS 3.1: 8.2 HIGHCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
EPSS: 0.43% probability · 36th percentile
CISA KEV: Not listed
Source: cret@cert.org

References

https://uefi.org/specs/UEFI/2.10/32_Secure_Boot_and_Driver_Signing.html
https://www.binarly.io/advisories/brly-dva-2025-001
https://www.kb.cert.org/vuls/id/806555

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.