Is CVE-2022-40262 actively exploited?

No active exploitation of CVE-2022-40262 has been confirmed so far. Continue monitoring, as exploit status can change.

Can CVE-2022-40262 be exploited remotely?

No. CVE-2022-40262 requires local access to exploit.

What is the CVSS score of CVE-2022-40262?

CVE-2022-40262 has a CVSS score of 8.2 (HIGH).

HOME VULNERABILITIESCVE-2022-40262

HIGH

CVE-2022-40262

CWE-123Published: September 20, 2022· Updated: Jun 17, 2026

8.2

CVSS v3.1

Official Description

A potential attacker can execute an arbitrary code at the time of the PEI phase and influence the subsequent boot stages. This can lead to the mitigations bypassing, physical memory contents disclosure, discovery of any secrets from any Virtual Machines (VMs) and bypassing memory isolation and confidential computing boundaries. Additionally, an attacker can build a payload which can be injected into the SMRAM memory. This issue affects: Module name: S3Resume2Pei SHA256: 7bb29f05534a8a1e010443213451425098faebd45948a4642db969b19d0253fc Module GUID: 89E549B0-7CFE-449D-9BA3-10D8B2312D71

NVD Source

Technical Analysis

CVE-2022-40262 requires local access, meaning attackers must already have a foothold on the target system.

Exploitation requires high privileges, which limits the exposure to scenarios where an attacker has already gained initial access.

A successful exploit results in complete confidentiality breach (data exposure), full integrity compromise (data manipulation), availability disruption (denial of service), with a CVSS base score of 8.2.

The vulnerability has a "Changed" scope, meaning successful exploitation can impact components beyond the vulnerable component itself — such as the host operating system or adjacent services.