Known vulnerabilities in edk2 edk2-stable202305

Vendor: TianoCore
Software: edk2
Version: edk2-stable202305
Software CPE: cpe:2.3:h:tianocore:edk2:*:*:*:*:*:*:*:*
Website: https://www.tianocore.org/
Total vulnerabilities: 20
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting edk2 version edk2-stable202305 edk2 edk2-stable202305 is affected by 20 vulnerabilities: 11 medium, 9 low Critical High Medium Low

Vulnerabilities (20)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU119804 - Exposure of sensitive information to an unauthorized actor
CVE-2024-38798		 CWE-200 Low
No
No
 edk2-stable202511 10.12.2025 SB20251210176
SB2025122701
SB2026020648
and 2 more
#VU119803 - Protection Mechanism Failure
CVE-2025-2296		 CWE-693 Low
No
No
 edk2-stable202505 10.12.2025 SB2025112721
SB20260626137
#VU118805 - Out-of-bounds read
CVE-2024-38797		 CWE-125 Medium
No
No
 edk2-stable202505 27.11.2025 SB2025112721
SB2025112725
SB2025112736
and 2 more
#VU116004 - Integer overflow
CVE-2024-38805		 CWE-190 Medium
No
No
 edk2-stable202508 22.09.2025 SB2025080722
SB2025092259
SB2025092260
and 7 more
#VU113731 - Uncaught Exception
CVE-2025-3770		 CWE-248 Low
No
No
 edk2-stable202508 07.08.2025 SB2025080722
SB20250908112
SB2025092259
and 9 more
#VU105798 - Out-of-bounds read
CVE-2025-2295		 CWE-125 Medium
No
No
 edk2-stable202502 17.03.2025 SB20250317123
SB2025112725
SB2025120211
and 4 more
#VU97766 - Integer overflow
CVE-2024-38796		 CWE-190 Medium
No
No
 edk2-stable202408.01 30.09.2024 SB2024093020
SB2024101864
SB2024111902
and 23 more
#VU95180 - Integer overflow
CVE-2022-36765		 CWE-190 Low
No
No
 edk2-stable202402 02.08.2024 SB2024080236
SB2024021453
SB2024021639
and 8 more
#VU91170 - Divide By Zero
CVE-2024-1298		 CWE-369 Low
No
No
 edk2-stable202405 05.06.2024 SB2024060534
SB2024060588
SB2024060589
and 13 more
#VU89083 - Integer overflow
CVE-2022-36763		 CWE-190 Low
No
No
 edk2-stable202402 01.05.2024 SB2024011752
SB2024050117
SB2024021453
and 9 more
#VU87737 - Integer overflow
CVE-2022-36764		 CWE-190 Medium
No
No
 edk2-stable202402 22.03.2024 SB2024011752
SB2024032253
SB2024032254
and 11 more
#VU85528 - Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)
CVE-2023-45237		 CWE-338 Medium
No
No
 edk2-stable202402 17.01.2024 SB2024011751
SB2024012940
SB2024012950
and 24 more
#VU85527 - Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)
CVE-2023-45236		 CWE-338 Low
No
No
 edk2-stable202402 17.01.2024 SB2024011751
SB2024012940
SB2024012950
and 24 more
#VU85526 - Memory corruption
CVE-2023-45235		 CWE-119 Medium
No
No
 edk2-stable202402 17.01.2024 SB2024011752
SB2024012940
SB2024012950
and 37 more
#VU85525 - Memory corruption
CVE-2023-45234		 CWE-119 Medium
No
No
 edk2-stable202402 17.01.2024 SB2024011752
SB2024012940
SB2024012950
and 30 more
#VU85523 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2023-45233		 CWE-835 Medium
No
No
 edk2-stable202402 17.01.2024 SB2024011752
SB2024012940
SB2024012950
and 28 more
#VU85522 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2023-45232		 CWE-835 Medium
No
No
 - 17.01.2024 SB2024011752
SB2024012940
SB2024012950
and 28 more
#VU85521 - Out-of-bounds read
CVE-2023-45231		 CWE-125 Low
No
No
 edk2-stable202402 17.01.2024 SB2024011752
SB2024012940
SB2024012950
and 27 more
#VU85520 - Memory corruption
CVE-2023-45230		 CWE-119 Medium
No
No
 edk2-stable202402 17.01.2024 SB2024011752
SB2024012940
SB2024012950
and 35 more
#VU85519 - Out-of-bounds read
CVE-2023-45229		 CWE-125 Low
No
No
 edk2-stable202402 17.01.2024 SB2024011752
SB2024012940
SB2024012950
and 27 more