Known vulnerabilities in edk2 edk2-stable202505

Vendor: TianoCore
Software: edk2
Version: edk2-stable202505
Software CPE: cpe:2.3:h:tianocore:edk2:*:*:*:*:*:*:*:*
Website: https://www.tianocore.org/
Total vulnerabilities: 3
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.7

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting edk2 version edk2-stable202505 edk2 edk2-stable202505 is affected by 3 vulnerabilities: 1 medium, 2 low Critical High Medium Low

Vulnerabilities (3)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU119804 - Exposure of sensitive information to an unauthorized actor
CVE-2024-38798		 CWE-200 Low
No
No
 edk2-stable202511 10.12.2025 SB20251210176
SB2025122701
SB2026020648
and 2 more
#VU116004 - Integer overflow
CVE-2024-38805		 CWE-190 Medium
No
No
 edk2-stable202508 22.09.2025 SB2025080722
SB2025092259
SB2025092260
and 7 more
#VU113731 - Uncaught Exception
CVE-2025-3770		 CWE-248 Low
No
No
 edk2-stable202508 07.08.2025 SB2025080722
SB20250908112
SB2025092259
and 9 more