Vendors / Clevo Records 2 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0 CVSS 9.0–10.0
CVSS high 2 CVSS 7.0–8.9
Exploited now Clevo records in CISA KEV No Clevo vulnerabilities are listed in CISA KEV.
Priority LOW 38
Clevo HotKey Clipboard 2.1.0.6 contains an unquoted service path vulnerability in the HKClipSvc service that allows local non-privileged users to potentially execute code with system privileges.
CVSS 4.0 HIGH 8.5· Local · Low privileges · No interaction · EPSS 0.00218 · Published 2026-01-13 · No fix listed CWE-428
Priority LOW 35
Clevo’s UEFI firmware update packages, including B10717.exe, inadvertently contained private signing keys used for Boot Guard and Boot Policy Manifest verification.
CVSS 3.1 HIGH 7.6· Physical · No auth · No interaction · EPSS 0.00261 · Published 2025-10-14 · No fix listed
Open these records in search → All records by CVSS severity
Critical0 High2 Medium0 Low0 No CVSS0