328 matches found
EDK II Resource Management Error Vulnerability
EDK II is a modern, feature-rich cross-platform firmware development environment for UEFI and the UEFI Platform Initialization PI specification. EDK II suffers from a resource management error vulnerability that can be exploited by an attacker to cause a denial of service...
EDK II Elevation of Privilege Vulnerability
EDK II is a modern, feature-rich cross-platform firmware development environment for UEFI and the UEFI Platform Initialization PI specification. An elevation of privilege vulnerability exists in EDK II that stems from a logic issue in EDK II's DxeImageVerificationHandler, which can be exploited b...
EDK II Integer Truncation Vulnerability
EDK II is a modern, feature-rich cross-platform firmware development environment for UEFI and the UEFI Platform Initialization PI specification. EDK II suffers from an integer truncation vulnerability that can be exploited by authenticated users to elevate privileges...
CVE-2019-14587
Logic issue EDK II may allow an unauthenticated user to potentially enable denial of service via adjacent access...
CVE-2019-14587
Logic issue EDK II may allow an unauthenticated user to potentially enable denial of service via adjacent access...
DEBIAN-CVE-2019-14586
Use after free vulnerability in EDK II may allow an authenticated user to potentially enable escalation of privilege, information disclosure and/or denial of service via adjacent access...
CVE-2019-14586
Use after free vulnerability in EDK II may allow an authenticated user to potentially enable escalation of privilege, information disclosure and/or denial of service via adjacent access...
CVE-2019-14586
Use after free vulnerability in EDK II may allow an authenticated user to potentially enable escalation of privilege, information disclosure and/or denial of service via adjacent access...
CVE-2019-14563
Integer truncation in EDK II may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2019-14563
Integer truncation in EDK II may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2019-14575
Logic issue in DxeImageVerificationHandler for EDK II may allow an authenticated user to potentially enable escalation of privilege via local access...
Privilege escalation
Logic issue in DxeImageVerificationHandler for EDK II may allow an authenticated user to potentially enable escalation of privilege via local access...
Design/Logic Flaw
Logic issue EDK II may allow an unauthenticated user to potentially enable denial of service via adjacent access...
Integer overflow
Integer truncation in EDK II may allow an authenticated user to potentially enable escalation of privilege via local access...
Design/Logic Flaw
Use after free vulnerability in EDK II may allow an authenticated user to potentially enable escalation of privilege, information disclosure and/or denial of service via adjacent access...
DEBIAN-CVE-2019-14553
Improper authentication in EDK II may allow a privileged user to potentially enable information disclosure via network access...
CVE-2019-14553
Improper authentication in EDK II may allow a privileged user to potentially enable information disclosure via network access...
CVE-2019-14559
Uncontrolled resource consumption in EDK II may allow an unauthenticated user to potentially enable denial of service via network access...
