CVE-2026-8810

MediumCVSS 6.9/10Last modified Aug 31, 2026

Description

On ARM platforms, a vulnerability in the architecture design of HDD Password could allow an attacker to retrieve HDD Password from UEFI variables.

Metrics

CVSS 3.1 6.9/10CVSS:3.1/AV:P/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H

Weakness enumeration

CWE-522

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

No affected versions have been published.

Timeline

Published
Aug 19, 2026
Last modified
Aug 31, 2026
NVD status
Awaiting Analysis

Related CVEs from 2026

CVE-2026-881007.8Use after free in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally.CVE-2026-881017.8Weak authentication in Microsoft Input Method Editor (IME) allows an authorized attacker to elevate privileges locally.CVE-2026-881029.8Use after free in Windows Failover Cluster allows an unauthorized attacker to execute code over a network.CVE-2026-881037.0Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.CVE-2026-881057.8Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.CVE-2026-881067.0Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.CVE-2026-881077.0Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.CVE-2026-881097.8Use after free in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally.CVE-2026-88117.1SEPPmail versions before 15.0.5 allow improper handling of attachment filenames during encrypted PDF generation. An attacker can exploit thiCVE-2026-881107.0Heap-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.CVE-2026-881128.8Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a network.CVE-2026-881137.0Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
CVE-2026-8810: Medium severity, CVSS 6.9 | Vulnix