USN-7894-2: EDK II regression

USN-7894-1 fixed vulnerabilities in EDK II. The update introduced a regression in the UEFI network boot. This update reverts the corresponding fixes for CVE-2023-45236 and CVE-2023-45237 pending further investigation. We apologize for the inconvenience. Original advisory details: It was discovere...

OESA-2025-2506 edk2 security update

EDK II is a modern, feature-rich, cross-platform firmware development environment for the UEFI and PI specifications. Security Fixes: Issue summary: An application trying to decrypt CMS messages encrypted using password based encryption can trigger an out-of-bounds read and write. Impact summary:...

OESA-2025-2504 edk2 security update

EDK II is a modern, feature-rich, cross-platform firmware development environment for the UEFI and PI specifications. Security Fixes: Issue summary: An application trying to decrypt CMS messages encrypted using password based encryption can trigger an out-of-bounds read and write. Impact summary:...

OESA-2025-2502 edk2 security update

EDK II is a modern, feature-rich, cross-platform firmware development environment for the UEFI and PI specifications. Security Fixes: Issue summary: An application trying to decrypt CMS messages encrypted using password based encryption can trigger an out-of-bounds read and write. Impact summary:...

OESA-2025-2388 edk2 security update

EDK II is a modern, feature-rich, cross-platform firmware development environment for the UEFI and PI specifications. Security Fixes: EDK2 contains a vulnerability in BIOS where a user may cause an Integer Overflow or Wraparound by network means. A successful exploitation of this vulnerability ma...

EUVD-2021-14900

Malware in sbrugna...

EUVD-2018-4159

Malware in sbrugna...

EUVD-2019-0967

Malware in sbrugna...

EUVD-2019-0968

Malware in sbrugna...

EUVD-2019-5714

Malware in sbrugna...

EUVD-2021-14901

Malware in sbrugna...

EUVD-2018-4157

Malware in sbrugna...

EUVD-2019-5736

Malware in sbrugna...

EUVD-2019-5748

Malware in sbrugna...

EUVD-2019-5724

Malware in sbrugna...

EUVD-2019-5720

Malware in sbrugna...

EUVD-2018-4156

Malware in sbrugna...

EUVD-2018-4161

Malware in sbrugna...

EUVD-2019-5747

Malware in sbrugna...

OESA-2025-2299 edk2 security update

EDK II is a modern, feature-rich, cross-platform firmware development environment for the UEFI and PI specifications. Security Fixes: EDK2 contains a vulnerability in BIOS where a user may cause an Integer Overflow or Wraparound by network means. A successful exploitation of this vulnerability ma...