Two Dozen UEFI Vulnerabilities Impact Millions of Devices From Major Vendors

The vulnerabilities are mostly related to System Management Mode and they can lead to arbitrary code execution with elevated privileges. CVE IDs have been assigned to each of the 23 weaknesses.