AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2019-18913

MEDIUM · CVSS 6.8 EPSS 0.60% Public Exploit

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2020-01-31 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

Detected Signals
code execution

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2019-18913
Severity
MEDIUM
CVSS
6.8
EPSS
0.60%
Microsoft Windows

Original NVD Description

A potential security vulnerability with pre-boot DMA may allow unauthorized UEFI code execution using open-case attacks. This industry-wide issue requires physically accessing internal expansion slots with specialized hardware and software tools to modify UEFI code in memory. This affects HP Intel-based Business PCs that support Microsoft Windows 10 Kernel DMA protection. Affected versions depend on platform (prior to 01.04.02; or prior to 02.04.01; or prior to 02.04.02).