High

DATE	CVE	VULNERABILITY TITLE	RISK
2022-11-28	CVE-2022-4020	Incorrect Default Permissions vulnerability in Acer products Vulnerability in the HQSwSmiDxe DXE driver on some consumer Acer Notebook devices may allow an attacker with elevated privileges to modify UEFI Secure Boot settings by modifying an NVRAM variable. local low complexity acer CWE-276	8.2

CVE is a registered MITRE Corporation trademark and MITRE's CVE website is the authoritative source of CVE content. CWE is a registered MITRE Corporation trademark and MITRE's CWE website is the authoritative source of CWE content.