# CVE-2026-50175: Intel Slim Bootloader pointer dereference in FirmwareWakingVector

Source: https://junglewise.ai/threats/cve-2026-50175-untrusted-pointer-dereference-in-the-firmwarewakingvector-for-the  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-11-10. Updated: 2026-11-10  
License: CC BY 4.0 with a link back

CVE-2026-50175 · Severity: info · Published 2026-11-10

Intel's Slim Bootloader firmware, which initializes processors on Intel systems, contains a vulnerability that allows privileged attackers to escalate their access even further within the system. An attacker with high-level system privileges could exploit this flaw to compromise confidentiality, integrity, and availability of the entire system, potentially gaining full control over the affected computer.

Technologies: [Intel Slim Bootloader](https://junglewise.ai/threats/technologies/slim-bootloader). Vendors: [Intel](https://junglewise.ai/threats/vendors/intel).

## Quick answers

**Is CVE-2026-50175 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-50175 being exploited in the wild.

**How severe is CVE-2026-50175?** Informational severity, published 10 November 2026.

**Which products and versions are affected?** Intel Slim Bootloader 12th Generation Core, Pentium Gold, Celeron (Alder Lake, Arizona Beach, Amston Lake); Processor N-series (Twin Lake).

**Is there a fix for CVE-2026-50175?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-2026-50175 attacked?** It is attacked with local access, in device firmware.

**Am I affected by CVE-2026-50175?** Check whether you run Intel Slim Bootloader at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

An untrusted pointer dereference in the FirmwareWakingVector component of Intel Slim Bootloader running in Ring 0 allows privilege escalation. The vulnerability affects startup code and requires a privileged user with local access; exploitation has low complexity and no user interaction is needed. A successful exploit grants the attacker high-impact access to system confidentiality, integrity, and availability.

## Affected products

- Intel Slim Bootloader 12th Generation Core, Pentium Gold, Celeron (Alder Lake, Arizona Beach, Amston Lake); Processor N-series (Twin Lake)

## Timeline

- 2026-11-10: disclosed

## References

- [https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01526.html](https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01526.html)

## Related threats

- [Intel Slim Bootloader Ext2 parser incorrect comparison](https://junglewise.ai/threats/cve-2026-44624-incorrect-comparison-in-the-ext2-parser-for-the-intel-r-slim)
- [Intel Slim Bootloader out-of-bounds write privilege escalation](https://junglewise.ai/threats/cve-2026-41224-out-of-bounds-write-in-the-uefi-firmware-for-the-intel-r-slim)
- [Intel Slim Bootloader integer overflow in UEFI firmware](https://junglewise.ai/threats/cve-2026-41221-integer-overflow-in-the-uefi-firmware-for-the-intel-r-slim)
- [Intel Slim Bootloader stack buffer overflow in Ring 0](https://junglewise.ai/threats/cve-2026-35500-stack-based-buffer-overflow-in-the-uefi-firmware-for-the-intel-r)
- [Intel Slim Bootloader out-of-bounds read in AuthenticateComponent](https://junglewise.ai/threats/cve-2026-28746-out-of-bounds-read-in-the-authenticatecomponent-for-the-intel-r)