CVE-2022-4304 affecting package edk2 for versions less than 20230301gitf80f052277c8-42

CVE-2022-4304 affecting package edk2 for versions less than 20230301gitf80f052277c8-42. A patched version of the package is available...

CVE-2023-45231 affecting package edk2 for versions less than 20230301gitf80f052277c8-42

CVE-2023-45231 affecting package edk2 for versions less than 20230301gitf80f052277c8-42. A patched version of the package is available...

CVE-2023-45229 affecting package edk2 for versions less than 20230301gitf80f052277c8-42

CVE-2023-45229 affecting package edk2 for versions less than 20230301gitf80f052277c8-42. A patched version of the package is available...

CVE-2025-3770

EDK2 contains a vulnerability in BIOS where an attacker may cause “Protection Mechanism Failure” by local access. Successful exploitation of this vulnerability will lead to arbitrary code execution and impact Confidentiality, Integrity, and Availability...

AZL-66108 CVE-2025-3770 affecting package edk2 for versions less than 20240524git3e722403cd16-9

EDK2 contains a vulnerability in BIOS where an attacker may cause “Protection Mechanism Failure” by local access. Successful exploitation of this vulnerability will lead to arbitrary code execution and impact Confidentiality, Integrity, and Availability...

AZL-66122 CVE-2025-3770 affecting package hvloader for versions less than 1.0.1-14

EDK2 contains a vulnerability in BIOS where an attacker may cause “Protection Mechanism Failure” by local access. Successful exploitation of this vulnerability will lead to arbitrary code execution and impact Confidentiality, Integrity, and Availability...

CVE-2025-3770

EDK2 contains a vulnerability in BIOS where an attacker may cause “Protection Mechanism Failure” by local access. Successful exploitation of this vulnerability will lead to arbitrary code execution and impact Confidentiality, Integrity, and Availability...

Azure Linux 3.0 Security Update: edk2 / hvloader (CVE-2023-45231)

The version of edk2 / hvloader installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-45231 advisory. - EDK2's Network Package is susceptible to an out-of-bounds read vulnerability when processing Neighb...

Azure Linux 3.0 Security Update: edk2 / hvloader (CVE-2023-45229)

The version of edk2 / hvloader installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-45229 advisory. - EDK2's Network Package is susceptible to an out-of-bounds read vulnerability when processing the IA...

CBL Mariner 2.0 Security Update: edk2 / hvloader (CVE-2024-38796)

The version of edk2 / hvloader installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-38796 advisory. - EDK2 contains a vulnerability in the PeCoffLoaderRelocateImage. An Attacker May cause memory...

PT-2025-32242

Name of the Vulnerable Software and Affected Versions EDK2 affected versions not specified Description EDK2 contains a vulnerability in BIOS that may allow an attacker to cause a “Protection Mechanism Failure” with local access. Successful exploitation of this issue could lead to arbitrary code...

EDK2 SMM MCE Enablement Issue

Summary A researcher reported a bug in the open source EDK2 system management interrupt SMI entry code when an MCE occurs near the start of the SMI handler. An attacker who can inject a machine check exception MCE could cause execution to jump to an attacker-controlled interrupt handler, leading ...

RHSA-2023:2932 Red Hat Security Advisory: edk2 security update

Bulletin has no description...

RHSA-2023:2022 Red Hat Security Advisory: edk2 security update

Bulletin has no description...

NewStart CGSL MAIN 7.02 : edk2 Multiple Vulnerabilities (NS-SA-2025-0105)

The remote NewStart CGSL host, running version MAIN 7.02, has edk2 packages installed that are affected by multiple vulnerabilities: - EDK2's Network Package is susceptible to a buffer overflow vulnerability when handling Server ID option from a DHCPv6 proxy Advertise message. This vulnerability...

RockyLinux 8 : edk2:20220126gitbb1bba3d77 (RLSA-2024:11185)

The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2024:11185 advisory. edk2: Integer overflows in PeCoffLoaderRelocateImage CVE-2024-38796 Tenable has extracted the preceding description block directly from the RockyLinux security...

edk2:20220126gitbb1bba3d77 security update

An update is available for edk2. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list EDK Embedded Development Kit is a project to enable UEFI support for Virtual...

TencentOS Server 4: edk2 (TSSA-2024:0895)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2024:0895 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

TencentOS Server 4: edk2 (TSSA-2024:0897)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2024:0897 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...

TencentOS Server 3: edk2 (TSSA-2024:0393)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2024:0393 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...