Security: tianocore/edk2
Security Advisories
View known security vulnerabilities and report new vulnerabilities privately to maintainers.
-
SMM IDT privilege escalation vulnerabilityGHSA-vx5v-4gg6-6qxr published
Aug 7, 2025 by jkmathewsHigh -
iSCSI Remote Memory Corruption and Denial of ServiceGHSA-p7wp-52j7-6r5x published
Aug 13, 2025 by jkmathewsModerate -
MdeModulePkg/Bus/Usb/UsbKbDxe: Uncleared password keystrokes in circular queue can lead to information disclosure or escalation of privilegeGHSA-q2c6-37h5-7cwf published
Dec 9, 2025 by jkmathewsModerate -
Un-verified kernel bypass Secure Boot mechanism in direct boot modeGHSA-6pp6-cm5h-86g5 published
Dec 9, 2025 by jkmathewsHigh -
Out of bound read in HashPeImageByTypeGHSA-4wjw-6xmf-44xf published
Apr 7, 2025 by jkmathewsModerate -
Integer overflows in PeCoffLoaderRelocateImageGHSA-xpcr-7hjq-m6qm published
Sep 27, 2024 by jkmathewsModerate -
Temporary DoS vulnerability in FirmwarePerformancePeiGHSA-chfw-xj8f-6m53 published
May 31, 2024 by jkmathewsModerate -
***IGNORE*** Test GHSAGHSA-5xcf-j538-p769 published
Dec 12, 2023 by jkmathewsLow -
Vulnerabilities in EDK2 NetworkPkg IP stack implementationGHSA-hc6x-cw6p-gj7h published
Jan 16, 2024 by jkmathewsHigh -
Remote Memory Exposure in iSCSI DXEGHSA-8522-69fh-w74x published
Mar 14, 2025 by jkmathewsLow