Known vulnerabilities in edk2 (Red Hat package) - page 2

Vendor: Red Hat Inc.
Software: edk2 (Red Hat package)
Software CPE: cpe:2.3:o:red_hat:edk2_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 28
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting edk2 (Red Hat package) edk2 (Red Hat package) is affected by 28 known vulnerabilities: 1 high, 19 medium, 8 low Critical High Medium Low

Vulnerabilities (28)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU75395 - Out-of-bounds write
CVE-2021-38578		 CWE-787 Low
No
No
 20221207gitfff6d81270b5-9.el9_2 21.04.2023 SB2023042109
SB2023042111
SB2023042139
and 18 more
#VU71996 - Double Free
CVE-2022-4450		 CWE-415 Medium
No
No
 20220126gitbb1bba3d77-4.el8, 20221207gitfff6d81270b5-9.el9_2 07.02.2023 SB2023020742
SB2023020748
SB2023020771
and 180 more
#VU71995 - Use After Free
CVE-2023-0215		 CWE-416 Medium
No
No
 20220126gitbb1bba3d77-2.el8_6.1, 20220126gitbb1bba3d77-4.el8, 20221207gitfff6d81270b5-9.el9_2 07.02.2023 SB2023020742
SB2023020747
SB2023020748
and 209 more
#VU71993 - Information Exposure Through Timing Discrepancy
CVE-2022-4304		 CWE-208 Medium
No
No
 20220126gitbb1bba3d77-2.el8_6.1, 20220126gitbb1bba3d77-4.el8, 20221207gitfff6d81270b5-9.el9_2 07.02.2023 SB2023020742
SB2023020748
SB2023020767
and 222 more
#VU71992 - Type confusion
CVE-2023-0286		 CWE-843 High
No
No
 20190829git37eef91017ad-9.el8_2.2, 20200602gitca407c7246bf-4.el8_4.3, 20220126gitbb1bba3d77-2.el8_6.1, 20220126gitbb1bba3d77-3.el9_0.2, 20220126gitbb1bba3d77-4.el8, 20221207gitfff6d81270b5-9.el9_2 07.02.2023 SB2023020742
SB2023020747
SB2023020748
and 223 more
#VU56490 - Memory corruption
CVE-2021-38575		 CWE-119 Medium
No
No
 20190308git89910a39dcfd-6.el8_1.1, 20190829git37eef91017ad-9.el8_2.1, 20200602gitca407c7246bf-4.el8_4.2 14.09.2021 SB2021091411
SB2021101001
SB2021091459
and 8 more
#VU50745 - Improper input validation
CVE-2021-23840		 CWE-20 Medium
No
No
 20210527gite1999b264f1f-3.el8 17.02.2021 SB2021021702
SB2021021817
SB2021022420
and 83 more
#VU50740 - NULL Pointer Dereference
CVE-2021-23841		 CWE-476 Medium
No
No
 20210527gite1999b264f1f-3.el8 17.02.2021 SB2021021702
SB2021021817
SB2021022420
and 66 more


Showing elements 21 - 40 out of 28