CVE-2025-7026

A vulnerability in the Software SMI handler (SwSmiInputValue 0xB2) allows a local attacker to control the RBX register , which is used as an unchecked pointer in the CommandRcx0 function. If the contents at RBX match specific values (e.g., '$DB$' or '2DB$' ), the handler performs arbitrary writes...