AZL-72559 CVE-2025-2296 affecting package hvloader for versions less than 1.0.1-15

EDK2 contains a vulnerability in BIOS where an attacker may cause “ Improper Input Validation” by local access. Successful exploitation of this vulnerability could alter control flow in unexpected ways, potentially allowing arbitrary command execution and impacting Confidentiality, Integrity, and...

CVE-2025-27489

CVE-2025-27489 is an Azure Local elevation-of-privilege vulnerability caused by improper input validation. It affects Azure Local components such as the Azure Local Cluster and the Windows VBS enclave, enabling an authorized attacker with local access to elevate privileges. Public details in conn...