Known vulnerabilities in edk2-devel
Vendor:
openEuler
Software:
edk2-devel
Software CPE:
cpe:2.3:o:openeuler:edk2-devel:*:*:*:*:*:openeuler:*:*
Website:
https://www.openeuler.org/
Total vulnerabilities:
72
Public exploits:
3
Known exploited (KEV):
0
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
202308-45
202002-38
202011-36
202308-43
202308-42
202308-41
202002-36
202011-34
202308-40
202002-35
202011-32
202308-34
202308-37
202308-35
202002-34
202308-33
202308-31
202308-30
202308-32
202308-27
202011-30
202308-29
202002-33
202308-26
202011-29
202308-28
202002-32
202011-28
202308-25
202011-26
202308-20
202308-21
202011-23
202308-17
202308-18
202002-27
202011-24
202011-22
202011-21
202308-10
202002-24
202011-20
202002-23
202011-19
202002-22
202002-21
202011-16
202002-19
202002-20
202002-18
202011-12
202002-16
202002-17
202002-15
202002-11
202011-6
202002-10
202002-8
202002-7
202002-6
202002-5
202002-4
202002-3
Vulnerabilities (72)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU134271 - Improper input validation CVE-2026-34182 |
CWE-20 | High | 202308-37, 202308-41 | 10.06.2026 |
SB20260610118 SB20260610119 SB20260610122 and 18 more |
||
| #VU134275 - Improper Initialization CVE-2026-45445 |
CWE-665 | Low | 202308-37, 202308-42 | 10.06.2026 |
SB20260610118 SB20260610119 SB20260610123 and 17 more |
||
| #VU134276 - Heap-based Buffer Overflow CVE-2026-7383 |
CWE-122 | Low | 202308-37, 202308-41 | 10.06.2026 |
SB20260610118 SB20260610119 SB20260610122 and 31 more |
||
| #VU134277 - Out-of-bounds read CVE-2026-9076 |
CWE-125 | Medium | 202002-36, 202011-34, 202308-37, 202308-41 | 10.06.2026 |
SB20260610118 SB20260610119 SB20260610122 and 32 more |
||
| #VU134278 - Out-of-bounds read CVE-2026-34180 |
CWE-125 | Medium | 202308-37, 202308-41 | 10.06.2026 |
SB20260610118 SB20260610119 SB20260610122 and 32 more |
||
| #VU134281 - NULL Pointer Dereference CVE-2026-42766 |
CWE-476 | Medium | 202002-38, 202011-36, 202308-41, 202308-45 | 10.06.2026 |
SB20260610118 SB20260610119 SB20260610122 and 33 more |
||
| #VU134282 - NULL Pointer Dereference CVE-2026-42767 |
CWE-476 | Medium | 202308-41, 202308-45 | 10.06.2026 |
SB20260610118 SB20260610119 SB20260610122 and 20 more |
||
| #VU134283 - Observable discrepancy CVE-2026-42768 |
CWE-203 | Medium | 202002-38, 202011-36, 202308-41, 202308-45 | 10.06.2026 |
SB20260610118 SB20260610119 SB20260610123 and 14 more |
||
| #VU134285 - Improper input validation CVE-2026-42770 |
CWE-20 | Medium | 202308-41, 202308-43 | 10.06.2026 |
SB20260610118 SB20260610119 SB20260610123 and 17 more |
||
| #VU125562 - Unchecked Return Value CVE-2026-31790 |
CWE-252 | Medium | 202308-33, 202308-37 | 09.04.2026 |
SB2026040943 SB2026040944 SB2026040945 and 25 more |
||
| #VU125564 - Use After Free CVE-2026-28387 |
CWE-416 | High | 202002-35, 202011-32, 202308-34, 202308-40 | 09.04.2026 |
SB2026040943 SB2026040944 SB2026040945 and 29 more |
||
| #VU125565 - NULL Pointer Dereference CVE-2026-28388 |
CWE-476 | Low | 202002-35, 202011-32, 202308-34, 202308-40 | 09.04.2026 |
SB2026040943 SB2026040944 SB2026040945 and 37 more |
||
| #VU125566 - NULL Pointer Dereference CVE-2026-28389 |
CWE-476 | Medium | 202308-34, 202308-40 | 09.04.2026 |
SB2026040943 SB2026040944 SB2026040945 and 30 more |
||
| #VU125567 - NULL Pointer Dereference CVE-2026-28390 |
CWE-476 | Medium | 202308-34, 202308-40 | 09.04.2026 |
SB2026040943 SB2026040944 SB2026040992 and 46 more |
||
| #VU125568 - Heap-based Buffer Overflow CVE-2026-31789 |
CWE-122 | Medium | 202308-34, 202308-40 | 09.04.2026 |
SB2026040943 SB2026040944 SB2026040945 and 21 more |
||
| #VU122086 - Type confusion CVE-2026-22796 |
CWE-843 | Medium | 202002-34, 202011-30, 202308-29, 202308-32, 202308-35 | 27.01.2026 |
SB2026012785 SB2026012791 SB2026012792 and 50 more |
||
| #VU122085 - NULL Pointer Dereference CVE-2026-22795 |
CWE-476 | Medium | 202002-34, 202011-30, 202308-29, 202308-32, 202308-35 | 27.01.2026 |
SB2026012785 SB2026012791 SB2026012792 and 47 more |
||
| #VU122084 - NULL Pointer Dereference CVE-2025-69421 |
CWE-476 | Medium | 202002-34, 202011-30, 202308-29, 202308-32, 202308-35 | 27.01.2026 |
SB2026012785 SB2026012791 SB2026012792 and 49 more |
||
| #VU119804 - Exposure of sensitive information to an unauthorized actor CVE-2024-38798 |
CWE-200 | Low | 202308-37, 202308-41 | 10.12.2025 |
SB20251210176 SB2025122701 SB2026020648 and 2 more |
||
| #VU105798 - Out-of-bounds read CVE-2025-2295 |
CWE-125 | Medium | 202002-36, 202011-34, 202308-37, 202308-41 | 17.03.2025 |
SB20250317123 SB2025112725 SB2025120211 and 4 more |
Showing elements 1 - 20 out of 72