CVE-2026-21121

A vulnerability exists in CmcCore prior to the SMR Oct-2026 Release 1 due to the improper handling of insufficient permissions . This flaw allows a local attacker to access and use privileged APIs . The impact of this vulnerability includes potential high confidentiality impact on the affected sy...

EUVD-2026-97185

Improper handling of insufficient permission in CmcCore prior to SMR Oct-2026 Release 1 allows local attackers to use the privileged APIs...