CVE & CISA-KEV CatalogNVD
CVE-2021-39298
HIGH8.8
CVSS v3
Description
A potential vulnerability in AMD System Management Mode (SMM) interrupt handler may allow an attacker with high privileges to access the SMM resulting in arbitrary code execution which could be used by malicious actors to bypass security mechanisms provided in the UEFI firmware.
How to fix
Remediation Available
elite dragonfly firmwareNVD
elite dragonfly g2 firmwareNVD
elite dragonfly max firmwareNVD
elite x2 1013 g3 firmwareNVD
elite x2 g4 firmwareNVD
elite x2 g8 tablet firmwareNVD
elitebook 1050 g1 firmwareNVD
elitebook 830 g5 firmwareNVD
elitebook 830 g6 firmwareNVD
elitebook 830 g7 firmwareNVD
elitebook 830 g8 firmwareNVD
elitebook 836 g5 firmwareNVD
elitebook 836 g6 firmwareNVD
elitebook 840 aero g8 firmwareNVD
elitebook 840 g5 firmwareNVD
elitebook 840 g5 healthcare edition firmwareNVD
elitebook 840 g6 firmwareNVD
elitebook 840 g6 healthcare edition firmwareNVD
elitebook 840 g7 firmwareNVD
elitebook 840 g8 firmwareNVD
elitebook 840r g4 firmwareNVD
elitebook 846 g5 firmwareNVD
elitebook 850 g5 firmwareNVD
elitebook 850 g6 firmwareNVD
elitebook 850 g7 firmwareNVD
elitebook 850 g8 firmwareNVD
elitebook x360 1030 g3 firmwareNVD
elitebook x360 1030 g4 firmwareNVD
elitebook x360 1030 g7 firmwareNVD
elitebook x360 1030 g8 firmwareNVD
elitebook x360 1040 g5 firmwareNVD
elitebook x360 1040 g6 firmwareNVD
elitebook x360 1040 g7 firmwareNVD
elitebook x360 1040 g8 firmwareNVD
elitebook x360 830 g5 firmwareNVD
elitebook x360 830 g6 firmwareNVD
elitebook x360 830 g7 firmwareNVD
elitebook x360 830 g8 firmwareNVD
engage flex mini retail system firmwareNVD
mp9 g4 retail system firmwareNVD
probook 430 g5 firmwareNVD
probook 430 g6 firmwareNVD
probook 430 g7 firmwareNVD
probook 430 g8 firmwareNVD
probook 440 g5 firmwareNVD
probook 440 g6 firmwareNVD
probook 440 g7 firmwareNVD
probook 440 g8 firmwareNVD
probook 450 g5 firmwareNVD
probook 450 g6 firmwareNVD
probook 450 g7 firmwareNVD
probook 450 g8 firmwareNVD
probook 470 g5 firmwareNVD
probook 630 g8 firmwareNVD
probook 640 g4 firmwareNVD
probook 640 g5 firmwareNVD
probook 640 g7 firmwareNVD
probook 640 g8 firmwareNVD
probook 650 g4 firmwareNVD
probook 650 g5 firmwareNVD
probook 650 g7 firmwareNVD
probook 650 g8 firmwareNVD
probook x360 11 g3 education edition firmwareNVD
probook x360 11 g4 education edition firmwareNVD
probook x360 11 g5 education edition firmwareNVD
probook x360 11 g6 education edition firmwareNVD
probook x360 11 g7 education edition firmwareNVD
probook x360 440 g1 firmwareNVD
z1 entry tower g5 workstation firmwareNVD
z1 entry tower g6 workstation firmwareNVD
z1 g8 tower desktop pc firmwareNVD
z4 g4 workstation \(core-x\) firmwareNVD
z4 g4 workstation \(xeon w\) firmwareNVD
z6 g4 workstation firmwareNVD
z8 g4 workstation firmwareNVD
zbook 14u g5 firmwareNVD
zbook 14u g6 firmwareNVD
zbook 15 g5 firmwareNVD
zbook 15 g6 firmwareNVD
zbook 15u g5 firmwareNVD
zbook 15u g6 firmwareNVD
zbook 17 g5 firmwareNVD
zbook 17 g6 firmwareNVD
zbook create g7 firmwareNVD
zbook firefly 14 g7 firmwareNVD
zbook firefly 14 g8 firmwareNVD
zbook firefly 15 g7 firmwareNVD
zbook firefly 15 g8 firmwareNVD
zbook fury 15 g7 firmwareNVD
zbook fury 15 g8 firmwareNVD
zbook fury 17 g7 firmwareNVD
zbook fury 17 g8 firmwareNVD
zbook power 15 g8 firmwareNVD
zbook power g7 firmwareNVD
zbook studio 15 g8 firmwareNVD
zbook studio g5 firmwareNVD
zbook studio g7 firmwareNVD
zbook studio x360 g5 firmwareNVD
zhan 66 pro 13 g2 firmwareNVD
zhan 66 pro 14 g2 firmwareNVD
zhan 66 pro 14 g3 firmwareNVD
zhan 66 pro 14 g4 firmwareNVD
zhan 66 pro 15 g2 firmwareNVD
zhan 66 pro 15 g3 firmwareNVD
zhan 66 pro g1 firmwareNVD
zhan x 13 g2 firmwareNVD
Remediation is compiled from vendor and distribution security advisories. Always confirm against the linked source for your exact version and platform.
CVSS v3 Vector
Exploitability
Attack VectorLocal
Attack ComplexityLow
Privileges RequiredLow
User InteractionNone
ScopeChanged
Impact
ConfidentialityHigh
IntegrityHigh
AvailabilityHigh
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Exploit Intelligence
0.43%probability of exploitation in 30 days
34thpercentile
Low risk: more likely to be exploited than 34% of all known CVEs.
References
Embed a live status badge for CVE-2021-39298
Markdown
[](https://tridentstack.com/cve/CVE-2021-39298)HTML
<a href="https://tridentstack.com/cve/CVE-2021-39298"><img src="https://tridentstack.com/cve/badge/CVE-2021-39298.svg" alt="CVE-2021-39298"></a>Find and fix vulnerabilities across your fleet
TridentStack Control continuously scans your Windows, macOS, and Linux fleet for known vulnerabilities, prioritizes them by severity and active exploitation, and patches them automatically.
Start freeThis product uses NVD data but is not endorsed or certified by the NVD. EPSS scores courtesy of FIRST.org (https://www.first.org/epss). Source: CISA KEV Catalog. Data as of 2026-02-24.