TianoCore EDK2

• CVE-2026-97631 Critical 9.5 Pre-boot RCE in EDK II PXE driver 0.6%
• CVE-2025-2296 High 8.4 Un-verified kernel bypass Secure Boot mechanism in direct boot mode 0.8%
• CVE-2024-38798 Medium 5.8 Uncleared password keystrokes in circular queue can lead to information disclosure or escalation of privilege 0.1%
• CVE-2024-38805 Medium 6.3 iSCSI Remote Memory Corruption and Denial of Service 0.2%
• CVE-2025-3770 High 7.0 SMM IDT Privilege Escalation Vulnerability 0.2%
• CVE-2024-38797 Medium 4.6 Out-of-bounds Read in HashPeImageByType() 0.2%
• CVE-2025-2295 Low 3.5 Potential iSCSI R2T PDU Vulnerability 0.2%
• CVE-2024-38796 Medium 5.9 Integer overflow in PeCoffLoaderRelocateImage 0.4%
• CVE-2024-1298 Medium 6.0 Integer Overflow caused by divide by zero during S3 suspension 0.2%
• CVE-2023-45234 High 8.3 Buffer Overflow in EDK II Network Package 1.2%
• CVE-2023-45233 High 7.5 Infinite loop in EDK II Network Package 2.1%
• CVE-2023-45232 High 7.5 Infinite loop in EDK II Network Package 2.1%
• CVE-2023-45235 High 8.3 Buffer Overflow in EDK II Network Package 1.2%
• CVE-2023-45237 Medium 5.3 Use of a Weak PseudoRandom Number Generator in EDK II Network Package 1.0%
• CVE-2023-45236 Medium 5.8 Predictable TCP ISNs in EDK II Network Package 1.0%
• CVE-2023-45231 Medium 6.5 Out-of-Bounds Read in EDK II Network Package 0.8%
• CVE-2023-45230 High 8.3 Buffer Overflow in EDK II Network Package 1.2%
• CVE-2023-45229 Medium 6.5 Out-of-Bounds Read in EDK II Network Package 1.0%
• CVE-2022-36765 High 7.0 Integer Overflow in CreateHob 0.3%
• CVE-2022-36764 High 7.0 Heap Buffer Overflow in Tcg2MeasurePeImage 0.3%
• CVE-2022-36763 High 7.0 Heap Buffer Overflow in Tcg2MeasureGptTable 0.3%