CVE-2026-976319.5Critical
Pre-boot RCE in EDK II PXE driver
TianoCore · EDK2
Not in CISA KEV
0.4%probability of exploitation in the next 30 days
37th percentile
050100
Higher than 37% of scored CVEs
9.5CriticalCVSS
LowMediumHighCrit.
DescriptionNVD
EDK2 contains a vulnerability in BIOS where a user may cause “Out-of-bounds Write”, Classic Buffer Overflow, and “Incorrect Calculation of Buffer Size” by remote access. Successful exploitation of this vulnerability can lead to arbitrary code execution. It could also impact Confidentiality, Integrity, and Availability.
Coverage1 article · 1 outlet
First in our coverage: Ars Technica, 27 Oct.
- UEFI flaw allows code execution before operating system loadsArs Technica · first in our coverage
New articles also arrive in the RSS feed.