Known vulnerabilities in edk2 edk2-stable202411

Vendor: TianoCore
Software: edk2
Version: edk2-stable202411
Software CPE: cpe:2.3:h:tianocore:edk2:*:*:*:*:*:*:*:*
Website: https://www.tianocore.org/
Total vulnerabilities: 6
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.7

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting edk2 version edk2-stable202411 edk2 edk2-stable202411 is affected by 6 vulnerabilities: 3 medium, 3 low Critical High Medium Low

Vulnerabilities (6)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU119804 - Exposure of sensitive information to an unauthorized actor
CVE-2024-38798		 CWE-200 Low
No
No
 edk2-stable202511 10.12.2025 SB20251210176
SB2025122701
SB2026020648
and 2 more
#VU119803 - Protection Mechanism Failure
CVE-2025-2296		 CWE-693 Low
No
No
 edk2-stable202505 10.12.2025 SB2025112721
SB20260626137
#VU118805 - Out-of-bounds read
CVE-2024-38797		 CWE-125 Medium
No
No
 edk2-stable202505 27.11.2025 SB2025112721
SB2025112725
SB2025112736
and 2 more
#VU116004 - Integer overflow
CVE-2024-38805		 CWE-190 Medium
No
No
 edk2-stable202508 22.09.2025 SB2025080722
SB2025092259
SB2025092260
and 7 more
#VU113731 - Uncaught Exception
CVE-2025-3770		 CWE-248 Low
No
No
 edk2-stable202508 07.08.2025 SB2025080722
SB20250908112
SB2025092259
and 9 more
#VU105798 - Out-of-bounds read
CVE-2025-2295		 CWE-125 Medium
No
No
 edk2-stable202502 17.03.2025 SB20250317123
SB2025112725
SB2025120211
and 4 more