tianocore edk2 vulnerabilities in 2021, newest first

By year: all 2026 2025 2024 2023 2022 2021

1. 8.1CVE-2021-38575EPSS 2.0%2021-12-01

   NetworkPkg/IScsiDxe has remotely exploitable buffer overflows.

2. 7.5CVE-2021-28213EPSS 1.1%2021-06-11

   Example EDK2 encrypted private key in the IpSecDxe.efi present potential security risks.

3. 6.7CVE-2021-28211EPSS 0.4%2021-06-11

   A heap overflow in LzmaUefiDecompressGetInfo function in EDK II.

4. 7.8CVE-2021-28210EPSS 0.4%2021-06-11

   An unlimited recursion in DxeCore in EDK II.

5. 7.8CVE-2019-14584EPSS 0.3%2021-06-03

   Null pointer dereference in Tianocore EDK2 may allow an authenticated user to potentially enable escalation of privilege via local access.