TI
Vendor
TianoCore
48
CVEs
1
On KEV
2
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-97631 New | ED EDK2 TianoCore | 9.5 | Oct 22 | Pre-boot RCE in EDK II PXE driver |
| CVE-2026-111497 In wildKEVNew | ED Edk2 Tianocore | 9.8 | Oct 22 | Out-of-Bounds Write in Google Brotli Decoder |
| CVE-2025-2296 | ED EDK2 TianoCore | 8.4 | Dec 9 | Un-verified kernel bypass Secure Boot mechanism in direct boot mode |
| CVE-2024-38798 | ED EDK2 TianoCore | 5.8 | Dec 9 | Uncleared password keystrokes in circular queue can lead to information disclosure or escalation of privilege |
| CVE-2025-2486 | ED Edk2 Tianocore | 8.8 | Nov 26 | UEFI Shell accessible in AAVMF with Secure Boot enabled on Ubuntu |
| CVE-2023-49721 | ED Edk2 Tianocore | 6.7 | Feb 14 | An insecure default to allow UEFI Shell in EDK2 was left enabled in LXD |
| CVE-2023-48733 | ED Edk2 Tianocore | 6.7 | Feb 14 | An insecure default to allow UEFI Shell in EDK2 was left enabled in Ubuntu's EDK2 |
| CVE-2023-45237 | ED Edk2 Tianocore | 7.5 | Jan 16 | EDK2's Network Package is susceptible to a predictable TCP Initial Sequence Number |
| CVE-2023-45236 | ED Edk2 Tianocore | 7.5 | Jan 16 | EDK2's Network Package is susceptible to a predictable TCP Initial Sequence Number |
| CVE-2023-45235 | ED Edk2 Tianocore | 8.8 | Jan 16 | EDK2's Network Package is susceptible to a buffer overflow vulnerability when handling Server ID option from a DHCPv6 proxy Advertise message |
| CVE-2023-45234 | ED Edk2 Tianocore | 8.8 | Jan 16 | EDK2's Network Package is susceptible to a buffer overflow vulnerability when processing DNS Servers option from a DHCPv6 Advertise message |
| CVE-2023-45233 | ED Edk2 Tianocore | 7.5 | Jan 16 | EDK2's Network Package is susceptible to an infinite lop vulnerability when parsing a PadN option in the Destination Options header of IPv6 |
| CVE-2023-45232 | ED Edk2 Tianocore | 7.5 | Jan 16 | EDK2's Network Package is susceptible to an infinite loop vulnerability when parsing unknown options in the Destination Options header of IPv6 |
| CVE-2023-45231 | ED Edk2 Tianocore | 6.5 | Jan 16 | EDK2's Network Package is susceptible to an out-of-bounds read vulnerability when processing Neighbor Discovery Redirect message |
| CVE-2023-45230 | ED Edk2 Tianocore | 8.8 | Jan 16 | EDK2's Network Package is susceptible to a buffer overflow vulnerability via a long server ID option in DHCPv6 client |
| CVE-2023-45229 | ED Edk2 Tianocore | 6.5 | Jan 16 | EDK2's Network Package is susceptible to an out-of-bounds read vulnerability when processing the IA_NA or IA_TA option in a DHCPv6 Advertise message |
| CVE-2022-36765 | ED Edk2 Tianocore | 7.8 | Jan 9 | EDK2 is susceptible to a vulnerability in the CreateHob() function, allowing a user to trigger a integer overflow to buffer overflow via a local network |
| CVE-2022-36764 | ED Edk2 Tianocore | 7.8 | Jan 9 | EDK2 is susceptible to a vulnerability in the Tcg2MeasurePeImage() function, allowing a user to trigger a heap buffer overflow via a local network |
| CVE-2022-36763 | ED Edk2 Tianocore | 7.8 | Jan 9 | EDK2 is susceptible to a vulnerability in the Tcg2MeasureGptTable() function, allowing a user to trigger a heap buffer overflow via a local network |
| CVE-2021-38578 | ED Edk2 Tianocore | 9.8 | Mar 3 | Existing CommBuffer checks in SmmEntryPoint will not catch underflow when computing BufferSize |
| CVE-2021-38576 | ED Edk2 Tianocore | 7.5 | Jan 3 | A BIOS bug in firmware for a particular PC model leaves the Platform authorization value empty |
| CVE-2021-38575 | ED Edk2 Tianocore | 8.1 | Dec 1 | NetworkPkg/IScsiDxe has remotely exploitable buffer overflows |
| CVE-2021-28216 | EI Edk II Tianocore | 7.8 | Aug 5 | BootPerformanceTable pointer is read from an NVRAM variable in PEI |
| CVE-2019-11098 | EI Edk II Tianocore | 6.8 | Jul 14 | Insufficient input validation in MdeModulePkg in EDKII may allow an unauthenticated user to potentially enable escalation of privilege, denial of service and/or information… |
| CVE-2021-28213 | ED Edk2 Tianocore | 7.5 | Jun 11 | Example EDK2 encrypted private key in the IpSecDxe.efi present potential security risks |
| CVE-2021-28211 | ED Edk2 Tianocore | 6.7 | Jun 11 | A heap overflow in LzmaUefiDecompressGetInfo function in EDK II |
| CVE-2021-28210 | ED Edk2 Tianocore | 7.8 | Jun 11 | An unlimited recursion in DxeCore in EDK II |
| CVE-2019-14584 | ED Edk2 Tianocore | 7.8 | Jun 3 | Null pointer dereference in Tianocore EDK2 may allow an authenticated user to potentially enable escalation of privilege via local access |
| CVE-2019-14587 | ED Edk2 Tianocore | 6.5 | Nov 23 | Logic issue EDK II may allow an unauthenticated user to potentially enable denial of service via adjacent access |
| CVE-2019-14586 | ED Edk2 Tianocore | 8.0 | Nov 23 | Use after free vulnerability in EDK II may allow an authenticated user to potentially enable escalation of privilege, information disclosure and/or denial of service via adjacent… |
| CVE-2019-14575 | ED Edk2 Tianocore | 7.8 | Nov 23 | Logic issue in DxeImageVerificationHandler() for EDK II may allow an authenticated user to potentially enable escalation of privilege via local access |
| CVE-2019-14563 | ED Edk2 Tianocore | 7.8 | Nov 23 | Integer truncation in EDK II may allow an authenticated user to potentially enable escalation of privilege via local access |
| CVE-2019-14562 | ED Edk2 Tianocore | 5.5 | Nov 23 | Integer overflow in DxeImageVerificationHandler() EDK II may allow an authenticated user to potentially enable denial of service via local access |
| CVE-2019-14559 | ED Edk2 Tianocore | 7.5 | Nov 23 | Uncontrolled resource consumption in EDK II may allow an unauthenticated user to potentially enable denial of service via network access |
| CVE-2019-14553 | ED Edk2 Tianocore | 4.9 | Nov 23 | Improper authentication in EDK II may allow a privileged user to potentially enable information disclosure via network access |
| CVE-2014-8271 | ED Edk2 Tianocore | 6.8 | Feb 6 | Buffer overflow in the Reclaim function in Tianocore EDK2 before SVN 16280 allows physically proximate attackers to gain privileges via a long variable name |
| CVE-2014-4859 | ED Edk2 Tianocore | 6.8 | Jan 31 | Integer overflow in the Drive Execution Environment (DXE) phase in the Capsule Update feature in the UEFI implementation in EDK2 allows physically proximate attackers to bypass… |
| CVE-2014-4860 | ED Edk2 Tianocore | 6.8 | Jan 31 | Multiple integer overflows in the Pre-EFI Initialization (PEI) boot phase in the Capsule Update feature in the UEFI implementation in EDK2 allow physically proximate attackers to… |
| CVE-2017-5731 | ED Edk2 Tianocore | 7.8 | Oct 28 | Bounds checking in Tianocompress before November 7, 2017 may allow an authenticated user to potentially enable an escalation of privilege via local access |
| CVE-2019-0161 | EI Edk II Tianocore | 5.5 | Mar 27 | Stack overflow in XHCI for EDK II may allow an unauthenticated user to potentially enable denial of service via local access |
| CVE-2019-0160 | EI Edk II Tianocore | 9.8 | Mar 27 | Buffer overflow in system firmware for EDK II may allow unauthenticated user to potentially enable escalation of privilege and/or denial of service via network access |
| CVE-2018-3613 | EI Edk II Tianocore | 7.8 | Mar 27 | Logic issue in variable service module for EDK II/UDK2018/UDK2017/UDK2015 may allow an authenticated user to potentially enable escalation of privilege, information disclosure… |
| CVE-2018-12183 | EI Edk II Tianocore | 6.8 | Mar 27 | Stack overflow in DxeCore for EDK II may allow an unauthenticated user to potentially enable escalation of privilege, information disclosure and/or denial of service via local… |
| CVE-2018-12182 | EI Edk II Tianocore | 6.7 | Mar 27 | Insufficient memory write check in SMM service for EDK II may allow an authenticated user to potentially enable escalation of privilege, information disclosure and/or denial of… |
| CVE-2018-12181 | EI Edk II Tianocore | 6.0 | Mar 27 | Stack overflow in corrupted bmp for EDK II may allow unprivileged user to potentially enable denial of service or elevation of privilege via local access |
| CVE-2018-12180 | EI Edk II Tianocore | 8.8 | Mar 27 | Buffer overflow in BlockIo service for EDK II may allow an unauthenticated user to potentially enable escalation of privilege, information disclosure and/or denial of service via… |
| CVE-2018-12179 | EI Edk II Tianocore | 7.8 | Mar 27 | Improper configuration in system firmware for EDK II may allow unauthenticated user to potentially enable escalation of privilege, information disclosure and/or denial of service… |
| CVE-2018-12178 | EI Edk II Tianocore | 9.1 | Mar 27 | Buffer overflow in network stack for EDK II may allow unprivileged user to potentially enable escalation of privilege and/or denial of service via network |