Tianocore EDK2 vulnerabilities
24 published CVEs name Tianocore EDK2 among the affected products.
- 24Published CVEs24 of them scored
- 5Last 12 monthspublished in the last year
- 1Critical11 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-14968
AMD MmSaveStateLib SysCall path performs out-of-bounds writes for partial save-state reads
TianoCore · EDK2
High7.0 - CVE-2026-18448
Leak SMM RAM from the kernel (Simply TSA after an SMI)
TianoCore · EDK2
Medium5.6 - CVE-2026-97631
Pre-boot RCE in EDK II PXE driver
TianoCore · EDK2
Critical9.5 - CVE-2025-2296
Un-verified kernel bypass Secure Boot mechanism in direct boot mode
TianoCore · EDK2
High8.4 - CVE-2024-38798
Uncleared password keystrokes in circular queue can lead to information disclosure or escalation of privilege
TianoCore · EDK2
Medium5.8 - CVE-2024-38805
iSCSI Remote Memory Corruption and Denial of Service
TianoCore · EDK2
Medium6.3 - CVE-2025-3770
SMM IDT Privilege Escalation Vulnerability
TianoCore · EDK2
High7.0 - CVE-2024-38797
Out-of-bounds Read in HashPeImageByType()
TianoCore · EDK2
Medium4.6 - CVE-2025-2295
Potential iSCSI R2T PDU Vulnerability
TianoCore · EDK2
Low3.5 - CVE-2024-38796
Integer overflow in PeCoffLoaderRelocateImage
TianoCore · EDK2
Medium5.9