CVE-2018-12158: Intel Next Unit Of Computing Firmware

Medium severity, CVSS 6.0. EPSS: 0.3% chance of exploitation in the next 30 days.

Insufficient input validation in BIOS update utility in Intel NUC FW kits downloaded before May 24, 2018 may allow a privileged user to potentially trigger a denial of service or information disclosure via local access.

Affected products

• Intel Next Unit Of Computing Firmware: before 2018-05-24 (fixed in 2018-05-24)

Published 2018-10-10. Last modified 2026-06-17.