TianoCore vulnerabilities
28 published CVEs name TianoCore among the affected products.
- 28Published CVEs28 of them scored
- 3Last 12 monthspublished in the last year
- 1Critical15 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-97631
Pre-boot RCE in EDK II PXE driver
TianoCore · EDK2
Critical9.5 - CVE-2025-2296
Un-verified kernel bypass Secure Boot mechanism in direct boot mode
TianoCore · EDK2
High8.4 - CVE-2024-38798
Uncleared password keystrokes in circular queue can lead to information disclosure or escalation of privilege
TianoCore · EDK2
Medium5.8 - CVE-2024-38805
iSCSI Remote Memory Corruption and Denial of Service
TianoCore · EDK2
Medium6.3 - CVE-2025-3770
SMM IDT Privilege Escalation Vulnerability
TianoCore · EDK2
High7.0 - CVE-2024-38797
Out-of-bounds Read in HashPeImageByType()
TianoCore · EDK2
Medium4.6 - CVE-2025-2295
Potential iSCSI R2T PDU Vulnerability
TianoCore · EDK2
Low3.5 - CVE-2024-38796
Integer overflow in PeCoffLoaderRelocateImage
TianoCore · EDK2
Medium5.9 - CVE-2024-1298
Integer Overflow caused by divide by zero during S3 suspension
TianoCore · edk2
Medium6.0 - CVE-2023-45234
Buffer Overflow in EDK II Network Package
TianoCore · edk2
High8.3