CVE-2026-97631

A flaw was found in EDK2. Due to improper buffer size calculations in the firmware, an unauthenticated remote attacker can trigger a buffer overflow. Successful exploitation can lead to arbitrary code execution or cause a denial of service DoS...

HvLoader

HvLoader Overview HvLoader.efi is an EFI application for loading an external hypervisor loader. HvLoader.efi loads a given hypervisor loader binary DLL, EFI, etc., and calls it's entry point passing HvLoader.efi ImageHandle. This way the hypervisor loader binary has access to HvLoader.efi's comma...

DEBIAN-CVE-2026-97631

EDK2 contains a vulnerability in BIOS where a user may cause “Out-of-bounds Write”, Classic Buffer Overflow, and “Incorrect Calculation of Buffer Size” by remote access. Successful exploitation of this vulnerability can lead to arbitrary code execution. It could also impact Confidentiality,...

CVE-2026-97631

EDK2 contains a vulnerability in BIOS where a user may cause “Out-of-bounds Write”, Classic Buffer Overflow, and “Incorrect Calculation of Buffer Size” by remote access. Successful exploitation of this vulnerability can lead to arbitrary code execution. It could also impact Confidentiality,...

EUVD-2026-108230

EDK2 contains a vulnerability in BIOS where a user may cause “Out-of-bounds Write”, Classic Buffer Overflow, and “Incorrect Calculation of Buffer Size” by remote access. Successful exploitation of this vulnerability can lead to arbitrary code execution. It could also impact Confidentiality,...

CVE-2026-97631

EDK2 contains a vulnerability in BIOS where a user may cause “Out-of-bounds Write”, Classic Buffer Overflow, and “Incorrect Calculation of Buffer Size” by remote access. Successful exploitation of this vulnerability can lead to arbitrary code execution. It could also impact Confidentiality,...

PT-2026-121430

EDK2 contains a vulnerability in BIOS where a user may cause “Out-of-bounds Write”, Classic Buffer Overflow, and “Incorrect Calculation of Buffer Size” by remote access. Successful exploitation of this vulnerability can lead to arbitrary code execution. It could also impact Confidentiality,...

Astra Linux – Vulnerability in edk2

EDK2’s Network Package is vulnerable to a buffer overflow vulnerability when processing the DNS Server option from a DHCPv6 Advertise message. This vulnerability can be exploited by an attacker to gain unauthorized access and potentially lead to a loss of Confidentiality, Integrity, and/or...

CVE-2026-84782 affecting package edk2 for versions less than 20240524git3e722403cd16-21

CVE-2026-84782 affecting package edk2 for versions less than 20240524git3e722403cd16-21. A patched version of the package is available...

CVE-2026-35189 affecting package edk2 for versions less than 20240524git3e722403cd16-21

CVE-2026-35189 affecting package edk2 for versions less than 20240524git3e722403cd16-21. A patched version of the package is available...

CVE-2026-75806 affecting package edk2 for versions less than 20240524git3e722403cd16-21

CVE-2026-75806 affecting package edk2 for versions less than 20240524git3e722403cd16-21. A patched version of the package is available...

CVE-2026-75805 affecting package edk2 for versions less than 20240524git3e722403cd16-21

CVE-2026-75805 affecting package edk2 for versions less than 20240524git3e722403cd16-21. A patched version of the package is available...

CVE-2026-54872 affecting package edk2 for versions less than 20240524git3e722403cd16-21

CVE-2026-54872 affecting package edk2 for versions less than 20240524git3e722403cd16-21. A patched version of the package is available...

CVE-2026-77696 affecting package edk2 for versions less than 20240524git3e722403cd16-21

CVE-2026-77696 affecting package edk2 for versions less than 20240524git3e722403cd16-21. A patched version of the package is available...

EulerOS 2.0 SP15 : EDK2 (EulerOS-SA-2026-3960)

According to the versions of the EDK2 package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Issue summary: Parsing a crafted DER-encoded ASN.1 structure with a primitivex000D element whose content exceeds 2 gigabytes in length may cause a he...

EulerOS 2.0 SP15 : EDK2 (EulerOS-SA-2026-3894)

According to the versions of the EDK2 package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Issue summary: Parsing a crafted DER-encoded ASN.1 structure with a primitivex000D element whose content exceeds 2 gigabytes in length may cause a he...

Astra Linux – Vulnerability in edk2

NetworkPkg/IScsiDxe has remotely exploitable buffer overflows...

Rocky Linux 8.6 [CIQ] Security Update: edk2-aarch64 / edk2-ovmf / edk2-tools / edk2-tools-debuginfo / etc Multiple Vulnerabilities (ciqsa-2026_1001)

The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261001 advisory. This advisory aggregates security fixes for the edk2 SRPM in CIQ LTS 8.6. It addresses 2 CVEs: CVE-2023-45230, CVE-2023-45234. Tenable has extracted the...

Rocky Linux 10.2 [CIQ] Security Update: edk2-aarch64 / edk2-debugsource / edk2-ovmf / edk2-tools / etc (crlsa-2026_18465)

The Rocky Linux 10.2 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202618465 advisory. edk2: EDK2: Improper Input Validation allows arbitrary command execution CVE-2025-2296 Tenable has extracted the preceding description block directly from the C...

Rocky Linux 8 [CIQ] Security Update: edk2-aarch64 / edk2-ovmf Multiple Vulnerabilities (crlsa-2024_1063)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20241063 advisory. edk2: Buffer overflow in the DHCPv6 client via a long Server ID option CVE-2023-45230 edk2: Buffer overflow when processing DNS Servers option in a DHCPv6...