RockyLinux 10 : edk2 (RLSA-2026:18465)

The remote RockyLinux 10 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:18465 advisory. edk2: EDK2: Improper Input Validation allows arbitrary command execution CVE-2025-2296 Tenable has extracted the preceding description block directly from the...

PT-2026-44854

Name of the Vulnerable Software and Affected Versions EDK II affected versions not specified Description An issue exists where the firmware measures bytes differently from those actually being used. This affects the PCR5 measurements, which record the expected GUID Partition Table GPT layout...

Ubuntu 22.04 LTS / 24.04 LTS / 25.04 : EDK II vulnerabilities (USN-7894-1)

The remote Ubuntu 22.04 LTS / 24.04 LTS / 25.04 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7894-1 advisory. It was discovered that EDK II was susceptible to a predictable TCP Initial Sequence Number. An attacker could possibly use this issue...

USN-7894-2: EDK II regression

USN-7894-1 fixed vulnerabilities in EDK II. The update introduced a regression in the UEFI network boot. This update reverts the corresponding fixes for CVE-2023-45236 and CVE-2023-45237 pending further investigation. We apologize for the inconvenience. Original advisory details: It was discovere...

OESA-2025-2502 edk2 security update

EDK II is a modern, feature-rich, cross-platform firmware development environment for the UEFI and PI specifications. Security Fixes: Issue summary: An application trying to decrypt CMS messages encrypted using password based encryption can trigger an out-of-bounds read and write. Impact summary:...

EUVD-2019-5748

Malware in sbrugna...

EUVD-2018-4159

Malware in sbrugna...

EUVD-2019-5714

Malware in sbrugna...

EUVD-2019-5747

Malware in sbrugna...

EUVD-2019-0967

Malware in sbrugna...

EUVD-2019-5736

Malware in sbrugna...

EUVD-2018-4157

Malware in sbrugna...

EUVD-2019-5724

Malware in sbrugna...

EUVD-2018-4161

Malware in sbrugna...

EUVD-2018-4156

Malware in sbrugna...

EUVD-2021-14900

Malware in sbrugna...

EUVD-2019-0968

Malware in sbrugna...

EUVD-2019-5720

Malware in sbrugna...

EUVD-2021-14901

Malware in sbrugna...

OESA-2025-2299 edk2 security update

EDK II is a modern, feature-rich, cross-platform firmware development environment for the UEFI and PI specifications. Security Fixes: EDK2 contains a vulnerability in BIOS where a user may cause an Integer Overflow or Wraparound by network means. A successful exploitation of this vulnerability ma...