ED
Product
edk2
On CISA KEVExploited in the wild
43
CVEs
1
On KEV
9.8
Max CVSS
2
New 30D
Severity mix
Critical 3High 23Medium 16Low 1
Watch
Add edk2 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-111497 In wildKEV | 9.8 | Oct 22 | Out-of-Bounds Write in Google Brotli Decoder Affected: through 202608 |
| CVE-2021-38578 | 9.8 | Mar 3 | Existing CommBuffer checks in SmmEntryPoint will not catch underflow when computing BufferSize Affected: through 202202 |
| CVE-2026-97631 New | 9.5 | Oct 22 | Pre-boot RCE in EDK II PXE driver Affected: through edk2-stable202608 |
Showing 3