Tianocore EDK2 vulnerabilities

CVEs per yearBy the year they were published

1. 20201
2. 202414
3. 20256
4. 20261

Newest CVEs

• CVE-2026-97631

  Pre-boot RCE in EDK II PXE driver

  TianoCore · EDK2

  Critical9.5
• CVE-2025-2296

  Un-verified kernel bypass Secure Boot mechanism in direct boot mode

  TianoCore · EDK2

  High8.4
• CVE-2024-38798

  Uncleared password keystrokes in circular queue can lead to information disclosure or escalation of privilege

  TianoCore · EDK2

  Medium5.8
• CVE-2024-38805

  iSCSI Remote Memory Corruption and Denial of Service

  TianoCore · EDK2

  Medium6.3
• CVE-2025-3770

  SMM IDT Privilege Escalation Vulnerability

  TianoCore · EDK2

  High7.0
• CVE-2024-38797

  Out-of-bounds Read in HashPeImageByType()

  TianoCore · EDK2

  Medium4.6
• CVE-2025-2295

  Potential iSCSI R2T PDU Vulnerability

  TianoCore · EDK2

  Low3.5
• CVE-2024-38796

  Integer overflow in PeCoffLoaderRelocateImage

  TianoCore · EDK2

  Medium5.9
• CVE-2024-1298

  Integer Overflow caused by divide by zero during S3 suspension

  TianoCore · edk2

  Medium6.0
• CVE-2023-45234

  Buffer Overflow in EDK II Network Package

  TianoCore · edk2

  High8.3