A series of five (5) critical vulnerabilities have been identified and disclosed affecting the Dell BIOS, and their exploitation could allow local authenticated attackers to execute arbitrary code on vulnerable systems. The flaws are improper input validation vulnerabilities that affect the System Management Mode (SMM) of the BIOS firmware, which is responsible for implementing power management and other hardware control features. These operations are entered via the System Management Interrupt (SMI), which executes the SMM BIOS code at the SYSTEM/root privilege. Multiple Dell products like Alienware, Inspiron, Vostro line-ups, and Edge Gateway 3000 Series are affected, and Dell urges their customers to upgrade to the latest BIOS firmware version immediately. These types of vulnerabilities are virtually unavoidable, due to complex technological changes that develop over time. What may have been the most secure today, could be the most vulnerable tomorrow. The specific vulnerabilities are listed in the article below. The Ankura CTIX urges all readers to regularly ensure the devices and software they utilize are as secure as possible, and we will continue to report on interesting critical vulnerabilities and zero-day bugs in coming issues.