CVE-2023-26299

Summary

CVE-2023-26299 is a newly identified TOCTOU vulnerability affecting select HP PC models with AMI UEFI Firmware. This issue can potentially enable attackers to execute arbitrary code by exploiting a mismatch between a system's file access check and the actual modification. AMI has addressed this risk by releasing patches to mitigate the vulnerability. Users of the affected HP PCs are encouraged to apply these updates promptly to protect against potential attacks.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.