CVE-2019-14563

High

Integer truncation in EDK II may allow an authenticated user to potentially enable escalation of privilege via local access.

intel·CWE-681·Published 2020-11-23

CVSS

7.8

EPSS

0.00

KEV

Exploits

cve.orgen

124 chars

Integer truncation in EDK II may allow an authenticated user to potentially enable escalation of privilege via local access.

NVDen

124 chars

Integer truncation in EDK II may allow an authenticated user to potentially enable escalation of privilege via local access.

Un truncamiento de enteros en EDK II, puede habilitar a un usuario autenticado para permitir potencialmente una escalada de privilegios por medio de un acceso local

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
2.0	Primary	NVD	4.6	3.9	6.4	AV:L/AC:L/Au:N/C:P/I:P/A:P
3.1	Primary	NVD	7.8	1.8	5.9	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H