Known vulnerabilities in edk2 UDK2018
Vendor:
TianoCore
Software:
edk2
Version:
UDK2018
Software CPE:
cpe:2.3:h:tianocore:edk2:*:*:*:*:*:*:*:*
Website:
https://www.tianocore.org/
Total vulnerabilities:
19
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
9.3
Vulnerabilities by Severity
edk2-stable202605
edk2-stable202602
edk2-stable202511
edk2-stable202508.01
edk2-stable202508
edk2-stable202505
edk2-stable202502
edk2-stable202411
edk2-stable202408.01
edk2-stable202408
202405
202402*
edk2-stable202405
edk2-stable202402
edk2-stable202311
edk2-stable202308
edk2-stable202305
edk2-stable202302
edk2-stable202211
edk2-stable202208
edk2-stable202205
edk2-stable202205-rc1
edk2-stable202202
edk2-stable202202-rc1
edk2-stable202111
edk2-stable202111-rc1
edk2-stable202108-rc1
edk2-stable202108-rc0
edk2-stable202108
edk2-stable202105
edk2-stable202102
edk2-stable202011
edk2-stable202008
edk2-stable202005
edk2-stable202002
edk2-stable201911
edk2-stable201908
edk2-stable201905
edk2-stable201903
UDK2018
UDK2017
edk2-stable201811
edk2-stable201808
-
Vulnerabilities (19)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU119804 - Exposure of sensitive information to an unauthorized actor CVE-2024-38798 |
CWE-200 | Low | edk2-stable202511 | 10.12.2025 |
SB20251210176 SB2025122701 SB2026020648 and 2 more |
||
| #VU119803 - Protection Mechanism Failure CVE-2025-2296 |
CWE-693 | Low | edk2-stable202505 | 10.12.2025 |
SB2025112721 SB20260626137 |
||
| #VU118805 - Out-of-bounds read CVE-2024-38797 |
CWE-125 | Medium | edk2-stable202505 | 27.11.2025 |
SB2025112721 SB2025112725 SB2025112736 and 2 more |
||
| #VU116004 - Integer overflow CVE-2024-38805 |
CWE-190 | Medium | edk2-stable202508 | 22.09.2025 |
SB2025080722 SB2025092259 SB2025092260 and 7 more |
||
| #VU113731 - Uncaught Exception CVE-2025-3770 |
CWE-248 | Low | edk2-stable202508 | 07.08.2025 |
SB2025080722 SB20250908112 SB2025092259 and 9 more |
||
| #VU105798 - Out-of-bounds read CVE-2025-2295 |
CWE-125 | Medium | edk2-stable202502 | 17.03.2025 |
SB20250317123 SB2025112725 SB2025120211 and 4 more |
||
| #VU97766 - Integer overflow CVE-2024-38796 |
CWE-190 | Medium | edk2-stable202408.01 | 30.09.2024 |
SB2024093020 SB2024101864 SB2024111902 and 23 more |
||
| #VU95180 - Integer overflow CVE-2022-36765 |
CWE-190 | Low | edk2-stable202402 | 02.08.2024 |
SB2024080236 SB2024021453 SB2024021639 and 8 more |
||
| #VU95178 - Memory corruption CVE-2018-12182 |
CWE-119 | Low | edk2-stable201905 | 02.08.2024 |
SB2019032719 SB2024080238 |
||
| #VU95176 - Stack-based buffer overflow CVE-2018-12183 |
CWE-121 | Low | edk2-stable201905 | 02.08.2024 |
SB2019032719 SB2024080238 |
||
| #VU95175 - Out-of-bounds write CVE-2019-0160 |
CWE-787 | High | edk2-stable201811 | 02.08.2024 |
SB2019032718 SB2024080238 |
||
| #VU91170 - Divide By Zero CVE-2024-1298 |
CWE-369 | Low | edk2-stable202405 | 05.06.2024 |
SB2024060534 SB2024060588 SB2024060589 and 13 more |
||
| #VU89083 - Integer overflow CVE-2022-36763 |
CWE-190 | Low | edk2-stable202402 | 01.05.2024 |
SB2024011752 SB2024050117 SB2024021453 and 9 more |
||
| #VU87737 - Integer overflow CVE-2022-36764 |
CWE-190 | Medium | edk2-stable202402 | 22.03.2024 |
SB2024011752 SB2024032253 SB2024032254 and 11 more |
||
| #VU75395 - Out-of-bounds write CVE-2021-38578 |
CWE-787 | Low | edk2-stable202211 | 21.04.2023 |
SB2023042109 SB2023042111 SB2023042139 and 18 more |
||
| #VU56490 - Memory corruption CVE-2021-38575 |
CWE-119 | Medium | edk2-stable202108 | 14.09.2021 |
SB2021091411 SB2021101001 SB2021091459 and 8 more |
||
| #VU54483 - NULL Pointer Dereference CVE-2019-14584 |
CWE-476 | Low | edk2-stable202011 | 30.06.2021 |
SB2021063039 SB2022111730 SB2023010516 and 3 more |
||
| #VU54482 - Inadequate Encryption Strength CVE-2021-28213 |
CWE-326 | Low | - | 30.06.2021 |
SB2021063040 |
||
| #VU54481 - Heap-based Buffer Overflow CVE-2021-28211 |
CWE-122 | Low | edk2-stable202011 | 30.06.2021 |
SB2021063039 SB2021063041 SB2021042027 and 11 more |