TianoCore product
EDK2
No EDK2 CVE is in the CISA KEV catalogue.
Tracked since 27 Oct · latest article 27 Oct · RSS · API
0Open KEV deadlines
None open
0Added to KEV · 90 days
of 0 in the full CISA catalogue · all time
0High exploit odds · current
EPSS top 5%, not in KEV
1Articles · 7 days
usual rate
Exploited, by due date
No EDK2 CVE is in the CISA KEV catalogue.
Patch cadence and exploit odds
How often CISA adds EDK2 CVEs, how many have a fix, and where their exploit odds sit.
Added to CISA KEV per quarter
CISA has not added a EDK2 CVE to KEV.
Fix listed
0 of 1 CVE in coverage
1 CVE has no vendor fix recorded yet.
EPSS percentile of each CVE
One dot per CVE; a red diamond marks those in CISA KEV.
Show as tableHide table
| CVE | EPSS percentile |
|---|---|
| CVE-2026-97631 | 37.4 |
Coverage1 article · all time
The latest article naming EDK2, in the shared story grammar.
Developinglatest 4 hours ago1 article1 outlet
1 article from 1 outlet since 27 Oct. Still developing; the latest report was 4 hours ago.
- Tue 27 Oct, 21:00 UTC. Ars Technica, first report. UEFI flaw allows code execution before operating system loads.
- CVE not in KEV
- No CVE
- Larger: an outlet’s first report
- Coverage over time
Show all 1 articles as a listHide the list
- Tue 27 OctDay 01
- UEFI flaw allows code execution before operating system loads21:00 · Ars Technica · First report
All CVEs in coverage1
Exploited first, then by EPSS
Pre-boot RCE in EDK II PXE driver
9.5Critical0.4% EPSS · 1 article