Known vulnerabilities in edk2 - page 2
Vendor:
TianoCore
Software:
edk2
Software CPE:
cpe:2.3:h:tianocore:edk2:*:*:*:*:*:*:*:*
Website:
https://www.tianocore.org/
Total vulnerabilities:
34
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
edk2-stable202605
edk2-stable202602
edk2-stable202511
edk2-stable202508.01
edk2-stable202508
edk2-stable202505
edk2-stable202502
edk2-stable202411
edk2-stable202408.01
edk2-stable202408
202405
202402*
edk2-stable202405
edk2-stable202402
edk2-stable202311
edk2-stable202308
edk2-stable202305
edk2-stable202302
edk2-stable202211
edk2-stable202208
edk2-stable202205
edk2-stable202205-rc1
edk2-stable202202
edk2-stable202202-rc1
edk2-stable202111
edk2-stable202111-rc1
edk2-stable202108-rc1
edk2-stable202108-rc0
edk2-stable202108
edk2-stable202105
edk2-stable202102
edk2-stable202011
edk2-stable202008
edk2-stable202005
edk2-stable202002
edk2-stable201911
edk2-stable201908
edk2-stable201905
edk2-stable201903
UDK2018
UDK2017
edk2-stable201811
edk2-stable201808
Vulnerabilities (34)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU95178 - Memory corruption CVE-2018-12182 |
CWE-119 | Low | edk2-stable201905 | 02.08.2024 |
SB2019032719 SB2024080238 |
||
| #VU95176 - Stack-based buffer overflow CVE-2018-12183 |
CWE-121 | Low | edk2-stable201905 | 02.08.2024 |
SB2019032719 SB2024080238 |
||
| #VU95175 - Out-of-bounds write CVE-2019-0160 |
CWE-787 | High | edk2-stable201811 | 02.08.2024 |
SB2019032718 SB2024080238 |
||
| #VU83486 - Unchecked Return Value CVE-2019-14560 |
CWE-252 | Low | edk2-stable202305 | 24.11.2023 |
SB2023112466 SB2023112468 SB2024031941 and 2 more |
||
| #VU75396 - Memory corruption CVE-2014-8271 |
CWE-119 | Low | - | 21.04.2023 | - | ||
| #VU75395 - Out-of-bounds write CVE-2021-38578 |
CWE-787 | Low | edk2-stable202211 | 21.04.2023 |
SB2023042109 SB2023042111 SB2023042139 and 18 more |
||
| #VU70612 - Improper input validation CVE-2019-11098 |
CWE-20 | Low | - | 02.01.2023 | - | ||
| #VU62014 - Uncontrolled Recursion CVE-2021-28210 |
CWE-674 | Low | edk2-stable202011 | 08.04.2022 |
SB2021061115 SB2022040806 SB2021042027 and 8 more |
||
| #VU56490 - Memory corruption CVE-2021-38575 |
CWE-119 | Medium | edk2-stable202108 | 14.09.2021 |
SB2021091411 SB2021101001 SB2021091459 and 8 more |
||
| #VU54483 - NULL Pointer Dereference CVE-2019-14584 |
CWE-476 | Low | edk2-stable202011 | 30.06.2021 |
SB2021063039 SB2022111730 SB2023010516 and 3 more |
||
| #VU54482 - Inadequate Encryption Strength CVE-2021-28213 |
CWE-326 | Low | - | 30.06.2021 | - | ||
| #VU54481 - Heap-based Buffer Overflow CVE-2021-28211 |
CWE-122 | Low | edk2-stable202011 | 30.06.2021 |
SB2021063039 SB2021063041 SB2021042027 and 11 more |
||
| #VU34844 - Integer overflow CVE-2014-4859 |
CWE-190 | Medium | - | 31.01.2020 | - | ||
| #VU34845 - Integer overflow CVE-2014-4860 |
CWE-190 | Medium | - | 31.01.2020 | - |
Showing elements 21 - 40 out of 34