CVE-2025-58770

High · 8.8

CVSS

8.8

EPSS

0.1%

Published

Dec 12, 2025

CISA due date

—

The record

APTIOV contains a vulnerability in BIOS where a user may cause “Improper Handling of Insufficient Permissions or Privileges” by local access. Successful exploitation of this vulnerability can lead to escalation of authorization and potentially impact Integrity and Availability.

Affected packages

Ecosystem	Package	Introduced	Fixed