CVE-2023-20526: exploitation status and patch state
CVE-2023-20526 · CVSS 1.9 LOW · EPSS <1%
Insufficient input validation in the ASP Bootloader may enable a privileged attacker with physical access to expose the contents of ASP memory potentially leading to a loss of confidentiality.
Is CVE-2023-20526 exploited?
Not in the CISA KEV catalog.
EPSS puts exploitation in the next 30 days at <1%.
Public exploit code: none found in monitored sources.