Browse CVEs

HIGH 7.5 CVE-2021-38576 A BIOS bug in firmware for a particular PC model leaves the Platform authorization value empty. This can be used to permanently brick the TPM in mult… Edk2 Mitigation only Fix from $1,9502022-01-03 HIGH 7.8 CVE-2021-28216 BootPerformanceTable pointer is read from an NVRAM variable in PEI. Recommend setting PcdFirmwarePerformanceDataTableS3Support to FALSE. Edk Ii No fix yet Fix from $1,9502021-08-05 MEDIUM 6.8 CVE-2019-11098 Insufficient input validation in MdeModulePkg in EDKII may allow an unauthenticated user to potentially enable escalation of privilege, denial of ser… Edk Ii Mitigation only Fix from $1,6002021-07-14 HIGH 7.5 CVE-2021-28213 Example EDK2 encrypted private key in the IpSecDxe.efi present potential security risks. Edk2 Mitigation only Fix from $1,9502021-06-11 HIGH 7.5 CVE-2019-14559 Uncontrolled resource consumption in EDK II may allow an unauthenticated user to potentially enable denial of service via network access. Edk2 Mitigation only Fix from $1,9502020-11-23 MEDIUM 6.8 CVE-2014-4859 Integer overflow in the Drive Execution Environment (DXE) phase in the Capsule Update feature in the UEFI implementation in EDK2 allows physically pr… Edk2 Mitigation only Fix from $1,6002020-01-31 MEDIUM 6.8 CVE-2014-4860 Multiple integer overflows in the Pre-EFI Initialization (PEI) boot phase in the Capsule Update feature in the UEFI implementation in EDK2 allow phys… Edk2 Mitigation only Fix from $1,6002020-01-31