CVE-2025-2296 | | | 2025-12-09 | EDK2 contains a vulnerability in BIOS where an attacker may cause “ Improper Input Validation” by local access. Successful exploitation of this vulnerability c… |
CVE-2024-38798 | | | 2025-12-09 | EDK2 contains a vulnerability in BIOS where an attacker may cause “Exposure of Sensitive Information to an Unauthorized Actor” by local access. Successful expl… |
CVE-2025-2486 | High | 8.8 | 2025-11-26 | The Ubuntu edk2 UEFI firmware packages accidentally allowed the UEFI Shell to be accessed in Secure Boot environments, possibly allowing bypass of Secure Boot… |
CVE-2024-38805 | Medium | 6.3 | 2025-08-12 | EDK2 contains a vulnerability in BIOS where a user may cause an Integer Overflow or Wraparound by network means. A successful exploitation of this vulnerabilit… |
CVE-2025-3770 | High | 7.0 | 2025-08-07 | EDK2 contains a vulnerability in BIOS where an attacker may cause “Protection Mechanism Failure” by local access. Successful exploitation of this vulnerability… |
CVE-2024-38797 | Medium | 4.6 | 2025-04-07 | EDK2 contains a vulnerability in the HashPeImageByType(). A user may cause a read out of bounds when a corrupted data pointer and length are sent via an adjece… |
CVE-2025-2295 | Low | 3.5 | 2025-03-14 | EDK2 contains a vulnerability in BIOS where a user may cause an Integer Overflow or Wraparound by network means. A successful exploitation of this vulnerabilit… |
CVE-2024-38796 | Medium | 5.9 | 2024-09-27 | EDK2 contains a vulnerability in the PeCoffLoaderRelocateImage(). An Attacker may cause memory corruption due to an overflow via an adjacent network. A success… |
CVE-2024-1298 | Medium | 6.0 | 2024-05-30 | EDK2 contains a vulnerability when S3 sleep is activated where an Attacker may cause a Division-By-Zero due to a UNIT32 overflow via local access. A successful… |
CVE-2023-49721 | Medium | 6.7 | 2024-02-14 | An insecure default to allow UEFI Shell in EDK2 was left enabled in LXD. This allows an OS-resident attacker to bypass Secure Boot. |
CVE-2023-48733 | Medium | 6.7 | 2024-02-14 | An insecure default to allow UEFI Shell in EDK2 was left enabled in Ubuntu's EDK2. This allows an OS-resident attacker to bypass Secure Boot. |
CVE-2023-45237 | Medium | 5.3 | 2024-01-16 | EDK2's Network Package is susceptible to a predictable TCP Initial Sequence Number. This
vulnerability can be exploited by an attacker to gain unauthorized
a… |
CVE-2023-45236 | Medium | 5.8 | 2024-01-16 | EDK2's Network Package is susceptible to a predictable TCP Initial Sequence Number. This
vulnerability can be exploited by an attacker to gain unauthorized
a… |
CVE-2023-45235 | High | 8.3 | 2024-01-16 | EDK2's Network Package is susceptible to a buffer overflow vulnerability when
handling Server ID option
from a DHCPv6 proxy Advertise message. This
… |
CVE-2023-45234 | High | 8.3 | 2024-01-16 | EDK2's Network Package is susceptible to a buffer overflow vulnerability when processing DNS Servers option from a DHCPv6 Advertise message. This
vulnerabilit… |
CVE-2023-45233 | High | 7.5 | 2024-01-16 | EDK2's Network Package is susceptible to an infinite lop vulnerability when parsing a PadN option in the Destination Options header of IPv6. This
vulnerabilit… |
CVE-2023-45232 | High | 7.5 | 2024-01-16 | EDK2's Network Package is susceptible to an infinite loop vulnerability when parsing unknown options in the Destination Options header of IPv6. This
vulnerabi… |
CVE-2023-45231 | Medium | 6.5 | 2024-01-16 | EDK2's Network Package is susceptible to an out-of-bounds read
vulnerability when processing Neighbor Discovery Redirect message. This
vulnerability can be… |
CVE-2023-45230 | High | 8.3 | 2024-01-16 | EDK2's Network Package is susceptible to a buffer overflow vulnerability via a long server ID option in DHCPv6 client. This
vulnerability can be exploited by… |
CVE-2023-45229 | Medium | 6.5 | 2024-01-16 | EDK2's Network Package is susceptible to an out-of-bounds read
vulnerability when processing the IA_NA or IA_TA option in a DHCPv6 Advertise message. This
vu… |
CVE-2022-36765 | High | 7.0 | 2024-01-09 | EDK2 is susceptible to a vulnerability in the CreateHob() function, allowing a user to trigger a integer overflow to buffer overflow via a local network. Succe… |
CVE-2022-36764 | High | 7.0 | 2024-01-09 | EDK2 is susceptible to a vulnerability in the Tcg2MeasurePeImage() function, allowing a user to trigger a heap buffer overflow via a local network. Successful… |
CVE-2022-36763 | High | 7.0 | 2024-01-09 | EDK2 is susceptible to a vulnerability in the Tcg2MeasureGptTable() function, allowing a user to trigger a heap buffer overflow via a local network. Successful… |
CVE-2021-38578 | High | 7.4 | 2022-03-03 | Existing CommBuffer checks in SmmEntryPoint will not catch underflow when computing BufferSize. |
CVE-2021-38576 | High | 7.5 | 2022-01-03 | A BIOS bug in firmware for a particular PC model leaves the Platform authorization value empty. This can be used to permanently brick the TPM in multiple ways… |
CVE-2021-38575 | High | 8.1 | 2021-12-01 | NetworkPkg/IScsiDxe has remotely exploitable buffer overflows. |
CVE-2021-28216 | High | 7.8 | 2021-08-05 | BootPerformanceTable pointer is read from an NVRAM variable in PEI. Recommend setting PcdFirmwarePerformanceDataTableS3Support to FALSE. |
CVE-2019-11098 | Medium | 6.8 | 2021-07-14 | Insufficient input validation in MdeModulePkg in EDKII may allow an unauthenticated user to potentially enable escalation of privilege, denial of service and/o… |
CVE-2021-28213 | High | 7.5 | 2021-06-11 | Example EDK2 encrypted private key in the IpSecDxe.efi present potential security risks. |
CVE-2021-28211 | Medium | 6.7 | 2021-06-11 | A heap overflow in LzmaUefiDecompressGetInfo function in EDK II. |
CVE-2021-28210 | High | 7.8 | 2021-06-11 | An unlimited recursion in DxeCore in EDK II. |
CVE-2019-14584 | High | 7.8 | 2021-06-03 | Null pointer dereference in Tianocore EDK2 may allow an authenticated user to potentially enable escalation of privilege via local access. |
CVE-2019-14587 | Medium | 6.5 | 2020-11-23 | Logic issue EDK II may allow an unauthenticated user to potentially enable denial of service via adjacent access. |
CVE-2019-14586 | High | 8.0 | 2020-11-23 | Use after free vulnerability in EDK II may allow an authenticated user to potentially enable escalation of privilege, information disclosure and/or denial of s… |
CVE-2019-14575 | High | 7.8 | 2020-11-23 | Logic issue in DxeImageVerificationHandler() for EDK II may allow an authenticated user to potentially enable escalation of privilege via local access. |
CVE-2019-14563 | High | 7.8 | 2020-11-23 | Integer truncation in EDK II may allow an authenticated user to potentially enable escalation of privilege via local access. |
CVE-2019-14562 | Medium | 5.5 | 2020-11-23 | Integer overflow in DxeImageVerificationHandler() EDK II may allow an authenticated user to potentially enable denial of service via local access. |
CVE-2019-14559 | High | 7.5 | 2020-11-23 | Uncontrolled resource consumption in EDK II may allow an unauthenticated user to potentially enable denial of service via network access. |
CVE-2019-14553 | Medium | 4.9 | 2020-11-23 | Improper authentication in EDK II may allow a privileged user to potentially enable information disclosure via network access. |
CVE-2014-8271 | Medium | 6.8 | 2020-02-06 | Buffer overflow in the Reclaim function in Tianocore EDK2 before SVN 16280 allows physically proximate attackers to gain privileges via a long variable name. |
CVE-2014-4860 | Medium | 6.8 | 2020-01-31 | Multiple integer overflows in the Pre-EFI Initialization (PEI) boot phase in the Capsule Update feature in the UEFI implementation in EDK2 allow physically pro… |
CVE-2014-4859 | Medium | 6.8 | 2020-01-31 | Integer overflow in the Drive Execution Environment (DXE) phase in the Capsule Update feature in the UEFI implementation in EDK2 allows physically proximate at… |
CVE-2017-5731 | High | 7.8 | 2019-10-28 | Bounds checking in Tianocompress before November 7, 2017 may allow an authenticated user to potentially enable an escalation of privilege via local access. |
CVE-2019-0161 | Medium | 5.5 | 2019-03-27 | Stack overflow in XHCI for EDK II may allow an unauthenticated user to potentially enable denial of service via local access. |
CVE-2019-0160 | Critical | 9.8 | 2019-03-27 | Buffer overflow in system firmware for EDK II may allow unauthenticated user to potentially enable escalation of privilege and/or denial of service via network… |
CVE-2018-3613 | High | 7.8 | 2019-03-27 | Logic issue in variable service module for EDK II/UDK2018/UDK2017/UDK2015 may allow an authenticated user to potentially enable escalation of privilege, inform… |
CVE-2018-12183 | Medium | 6.8 | 2019-03-27 | Stack overflow in DxeCore for EDK II may allow an unauthenticated user to potentially enable escalation of privilege, information disclosure and/or denial of s… |
CVE-2018-12182 | Medium | 6.7 | 2019-03-27 | Insufficient memory write check in SMM service for EDK II may allow an authenticated user to potentially enable escalation of privilege, information disclosure… |
CVE-2018-12181 | Medium | 6.0 | 2019-03-27 | Stack overflow in corrupted bmp for EDK II may allow unprivileged user to potentially enable denial of service or elevation of privilege via local access. |
CVE-2018-12180 | High | 8.8 | 2019-03-27 | Buffer overflow in BlockIo service for EDK II may allow an unauthenticated user to potentially enable escalation of privilege, information disclosure and/or de… |
CVE-2018-12179 | High | 7.8 | 2019-03-27 | Improper configuration in system firmware for EDK II may allow unauthenticated user to potentially enable escalation of privilege, information disclosure and/o… |
CVE-2018-12178 | Critical | 9.1 | 2019-03-27 | Buffer overflow in network stack for EDK II may allow unprivileged user to potentially enable escalation of privilege and/or denial of service via network. |