Product by Debian
Edk2
25 known vulnerabilities in Edk2 (Debian), 1 of them actively exploited (CISA KEV).
Key figures
25
Vulnerabilities
1
Actively exploited (KEV)
0
Used by ransomware
2
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2026-111497 | Out-of-Bounds Write in Google Brotli Decoder In CISA KEValso in 16 other products | 8.1 | |
| High | CVE-2022-0778 | Infinite loop in BN_mod_sqrt() reachable when parsing certificates | 7.5 | |
| High | CVE-2021-3712 | Read buffer overruns processing ASN.1 strings | 7.4 | |
| High | CVE-2023-45233 | Infinite loop in EDK II Network Package | 7.5 | |
| High | CVE-2023-45232 | Infinite loop in EDK II Network Package | 7.5 | |
| High | CVE-2021-38575 | TianoCore EDK II: Buffer Underflow | 8.1 | |
| High | CVE-2023-45235 | Buffer Overflow in EDK II Network Package | 8.3 | |
| High | CVE-2023-45230 | Buffer Overflow in EDK II Network Package | 8.3 | |
| High | CVE-2023-45234 | Buffer Overflow in EDK II Network Package | 8.3 | |
| High | CVE-2021-38576 | EDK II: security vulnerability | 7.5 | |
| Critical | CVE-2021-38578 | TianoCore EDK II: Buffer Underflow | 7.4 | |
| Medium | CVE-2023-45229 | Out-of-Bounds Read in EDK II Network Package | 6.5 | |
| Medium | CVE-2024-38796 | Integer overflow in PeCoffLoaderRelocateImage | 5.9 | |
| High | CVE-2019-14586 | Extensible Firmware Interface Development Kit (EDK II): Use-After-Free | 8.0 | |
| Medium | CVE-2023-45231 | Out-of-Bounds Read in EDK II Network Package | 6.5 | |
| Medium | CVE-2019-14587 | Extensible Firmware Interface Development Kit (EDK II): Denial of Service | 6.5 | |
| Medium | CVE-2024-1298 | Integer Overflow caused by divide by zero during S3 suspension | 6.0 | |
| High | CVE-2021-28216 | TianoCore EDK II: Assignment of a Fixed Address to a Pointer | 7.8 | |
| High | CVE-2019-14563 | Extensible Firmware Interface Development Kit (EDK II): security vulnerability | 7.8 | |
| High | CVE-2019-14575 | Extensible Firmware Interface Development Kit (EDK II): security vulnerability | 7.8 | |
| High | CVE-2022-36763 | Heap Buffer Overflow in Tcg2MeasureGptTable | 7.0 | |
| High | CVE-2022-36765 | Integer Overflow in CreateHob | 7.0 | |
| High | CVE-2022-36764 | Heap Buffer Overflow in Tcg2MeasurePeImage | 7.0 | |
| Medium | CVE-2023-48733 | Canonical Ubuntu EDK II: security vulnerability | 6.7 | |
| Medium | CVE-2019-14562 | Extensible Firmware Interface Development Kit (EDK II): Integer Overflow | 5.5 |
News
- Adobe Commerce PolyShell Attacks Breach Hundreds of Stores as Brotli Exploit Traffic Emergesthehackernews,
- Node2Shell puts Microsoft and Node.js on Brotli patch dutycsoonline,
- PHP Issues Second Windows Security Update in Five Days to Fix Brotli Code Execution Flawthehackernews,
- Node2Shell CVEsfortinet-psirt,
- Brotli Decoder Flaw Behind Node.js RCE Also Affects Bun, Python and Other Widely Used Softwarethehackernews,
- Researchers Demonstrate Node2Shell RCE Exploit on Node.js Build Using Crafted Brotli Datathehackernews,