CVE-2026-28729
Integer overflow in N/a Intel(R) Slim Bootloader May Allow An Information Disclosure. System Software Adversary With An Authenticated User Combined With A Low Complexity Attack May Enable Denial Of Service. This Result May Potentially Occur Via Local Access When Attack Requirements Are Not Present Without Special Internal Knowledge And Requires Active User Interaction. The Potential Vulnerability May Impact The Confidentiality (low), Integrity (none) And Availability (low) Of The Vulnerable System, Resulting In Subsequent System Confidentiality (low), Integrity (none) And Availability (low) Impacts.
CVSS score
2.4
EPSS probability
%0.1
Risk score
0.0
Published
2 mo ago
Vulnerability Timeline (Change History)
CVE-2026-28729 historical changes made to the vulnerability by NVD, CISA and MITRE:
| Date | Actor / Source | Action / Description | Type | Previous value | New value |
|---|---|---|---|---|---|
| 12.08.2026 | nvd@nist.gov | Initial Analysis & CVSS Vector Assignment | CVSS V3.1 | — | CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:A/VC:L/VI:N/VA:L/SC:L/SI:N/SA:L |
| 11.08.2026 | CISA Coordinator | SSVC Risk Re-assessment | SSVC / KEV | exploitation: none | exploitation: none |
| 11.08.2026 | MITRE / NVD | New CVE Record Received & Ingested | CVE Created | — | CVE-2026-28729 |
Similar Vulnerabilities
10.0
CVE-2015-3306 Actively exploitedImproper access control in N/a
Workaround Public Exploits:5EPSS %99
9.8
CVE-2021-21985 Actively exploitedVulnerability in N/a VMware vCenter Server And VMware Cloud Foundation
Workaround Public Exploits:10EPSS %100
9.8
CVE-2019-19781 Actively exploitedVulnerability in N/a
Workaround Public Exploits:13EPSS %100
9.8
CVE-2021-21972 Actively exploitedVulnerability in N/a VMware vCenter Server
Workaround Public Exploits:21EPSS %100
9.8
CVE-2019-15107 Actively exploitedVulnerability in N/a
Workaround Public Exploits:13EPSS %100
9.8
CVE-2022-30333 Actively exploitedPath traversal in N/a
Patch verified Public Exploits:5EPSS %99
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-28729"