in Alias Checking Trusted Module for some Intel(R) Xeon(R) processors may allow an escalation of privilege. Startup code and SMM adversary with a privileged user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack vulnerabilities

Product

in Alias Checking Trusted Module for some Intel(R) Xeon(R) processors may allow an escalation of privilege. Startup code and SMM adversary with a privileged user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack

by · last CVE Aug 11, 2026

CVEs

On KEV

7.2

Max CVSS

New 30D

Vulnerabilities1 In the news0 Timeline

Severity mix

Critical 0High 1Medium 0Low 0

Severity

All severities1 Critical0 High1 Medium0 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add in Alias Checking Trusted Module for some Intel(R) Xeon(R) processors may allow an escalation of privilege. Startup code and SMM adversary with a privileged user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2026-20898	7.2	0%	Aug 11	Improper access control in the firmware for some in Alias Checking Trusted Module for some Intel(R) Xeon(R) processors may allow an escalation of privilege Affected: See references