Log in Start free

TianoCore

Products

ProductCVEsExploitedLatest
EDK221–Oct 22, 2026
EDK II6–Mar 3, 2022

Exploited and recent CVEs

  • CVE-2026-97631 Critical 9.5 Pre-boot RCE in EDK II PXE driver 0.6%
  • CVE-2025-2296 High 8.4 Un-verified kernel bypass Secure Boot mechanism in direct boot mode 0.8%
  • CVE-2024-38798 Medium 5.8 Uncleared password keystrokes in circular queue can lead to information disclosure or escalation of privilege 0.1%
  • CVE-2024-38805 Medium 6.3 iSCSI Remote Memory Corruption and Denial of Service 0.2%
  • CVE-2025-3770 High 7.0 SMM IDT Privilege Escalation Vulnerability 0.2%
  • CVE-2024-38797 Medium 4.6 Out-of-bounds Read in HashPeImageByType() 0.2%
  • CVE-2025-2295 Low 3.5 Potential iSCSI R2T PDU Vulnerability 0.2%
  • CVE-2024-38796 Medium 5.9 Integer overflow in PeCoffLoaderRelocateImage 0.4%
  • CVE-2024-1298 Medium 6.0 Integer Overflow caused by divide by zero during S3 suspension 0.2%
  • CVE-2023-45234 High 8.3 Buffer Overflow in EDK II Network Package 1.2%
  • CVE-2023-45233 High 7.5 Infinite loop in EDK II Network Package 2.1%
  • CVE-2023-45232 High 7.5 Infinite loop in EDK II Network Package 2.1%
  • CVE-2023-45235 High 8.3 Buffer Overflow in EDK II Network Package 1.2%
  • CVE-2023-45237 Medium 5.3 Use of a Weak PseudoRandom Number Generator in EDK II Network Package 1.0%
  • CVE-2023-45236 Medium 5.8 Predictable TCP ISNs in EDK II Network Package 1.0%
  • CVE-2023-45231 Medium 6.5 Out-of-Bounds Read in EDK II Network Package 0.8%
  • CVE-2023-45230 High 8.3 Buffer Overflow in EDK II Network Package 1.2%
  • CVE-2023-45229 Medium 6.5 Out-of-Bounds Read in EDK II Network Package 1.0%
  • CVE-2022-36765 High 7.0 Integer Overflow in CreateHob 0.3%
  • CVE-2022-36764 High 7.0 Heap Buffer Overflow in Tcg2MeasurePeImage 0.3%
  • CVE-2022-36763 High 7.0 Heap Buffer Overflow in Tcg2MeasureGptTable 0.3%
  • CVE-2021-38578 High 7.4 Existing CommBuffer checks in SmmEntryPoint will not catch underflow when computing BufferSize. 1.0%
  • CVE-2021-38575 Unrated NetworkPkg/IScsiDxe has remotely exploitable buffer overflows. 2.0%
  • CVE-2021-28216 Unrated BootPerformanceTable pointer is read from an NVRAM variable in PEI. Recommend setting PcdFirmwarePerformanceDataTableS3Support to FALSE. 0.4%
  • CVE-2021-28210 Unrated An unlimited recursion in DxeCore in EDK II. 0.4%
  • CVE-2021-28213 Unrated Example EDK2 encrypted private key in the IpSecDxe.efi present potential security risks. 1.1%
  • CVE-2021-28211 Unrated A heap overflow in LzmaUefiDecompressGetInfo function in EDK II. 0.4%