Product by Ubuntu
Edk2
18 known vulnerabilities in Edk2 (Ubuntu), 1 of them actively exploited (CISA KEV).
Key figures
18
Vulnerabilities
1
Actively exploited (KEV)
0
Used by ransomware
2
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2026-111497 | Out-of-Bounds Write in Google Brotli Decoder In CISA KEValso in 19 other products | 8.1 | |
| High | CVE-2022-0778 | Infinite loop in BN_mod_sqrt() reachable when parsing certificates | 7.5 | |
| High | CVE-2021-3712 | Read buffer overruns processing ASN.1 strings | 7.4 | |
| High | CVE-2021-38575 | TianoCore EDK II: Buffer Underflow | 8.1 | |
| High | CVE-2024-41996 | Ubuntu Edk2: security vulnerability | 7.5 | |
| Critical | CVE-2021-38578 | TianoCore EDK II: Buffer Underflow | 7.4 | |
| High | CVE-2023-45236 | Predictable TCP ISNs in EDK II Network Package | 5.8 | |
| Medium | CVE-2024-38796 | Integer overflow in PeCoffLoaderRelocateImage | 5.9 | |
| High | CVE-2023-45237 | Use of a Weak PseudoRandom Number Generator in EDK II Network Package | 5.3 | |
| High | CVE-2025-2486 | UEFI Shell accessible in AAVMF with Secure Boot enabled on Ubuntu | 8.8 | |
| Medium | CVE-2024-1298 | Integer Overflow caused by divide by zero during S3 suspension | 6.0 | |
| High | CVE-2021-28210 | TianoCore EDK II: Uncontrolled Recursion | 7.8 | |
| High | CVE-2025-3770 | SMM IDT Privilege Escalation Vulnerability | 7.0 | |
| Medium | CVE-2024-38805 | iSCSI Remote Memory Corruption and Denial of Service | 6.3 | |
| Medium | CVE-2021-28211 | TianoCore EDK II: Heap-based Buffer Overflow | 6.7 | |
| Medium | CVE-2019-0161 | TianoCore EDK II: Denial of Service | 5.5 | |
| Medium | CVE-2024-38797 | Out-of-bounds Read in HashPeImageByType() | 4.6 | |
| Low | CVE-2025-2295 | Potential iSCSI R2T PDU Vulnerability | 3.5 |
News
- Vulnerabilities in Node.js Affecting Cisco Products: October 2026cisco-psirt,
- Adobe Commerce PolyShell Attacks Breach Hundreds of Stores as Brotli Exploit Traffic Emergesthehackernews,
- Node2Shell puts Microsoft and Node.js on Brotli patch dutycsoonline,
- PHP Issues Second Windows Security Update in Five Days to Fix Brotli Code Execution Flawthehackernews,
- Node2Shell CVEsfortinet-psirt,
- Brotli Decoder Flaw Behind Node.js RCE Also Affects Bun, Python and Other Widely Used Softwarethehackernews,