e
edk2
Security Risk Profile
53
/100
mediumSecurity Risk Score
Comprehensive risk assessment based on 7 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from February 14, 2024 to present
7
Total CVEs
2
Critical+High
0
Exploited
0
Unpatched
Threat Assessment
Avg CVSS
5.5
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
0
Critical/High
Risk Level
53/100
medium
Severity Distribution
Critical
0High
2Medium
2Low
2Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
0Age Distribution
Common Weaknesses (CWE)
1
Integer Overflow
3
2
Input Validation
1
Most Affected Products
1. debian/edk28
2. EDK2 EDK26
3. Microsoft cbl2 edk2 20230301gitf80f052277c8-433
4. Microsoft cbl2 hvloader 1.0.1-143
5. Microsoft cbl2 edk2 20230301gitf80f052277c8-423
Recent Vulnerabilities
See more →CVE-2025-2296
CVSS 8.4high
Un-verified kernel bypass Secure Boot mechanism in direct boot mode
Dec 9, 2025
CVE-2025-3770
CVSS 7.0high
SMM IDT Privilege Escalation Vulnerability
Aug 7, 2025
CVE-2024-38797
CVSS 4.6medium
Out-of-bounds Read in HashPeImageByType()
Apr 7, 2025
CVE-2025-2295
CVSS 3.5low
Potential iSCSI R2T PDU Vulnerability
Mar 14, 2025
CVE-2024-12546
CVSS 3.5low
Potential iSCSI R2T PDU Vulnerability
Mar 11, 2025🔧 No Patch
CVE-2024-38796
CVSS 5.9medium
Integer overflow in PeCoffLoaderRelocateImage
Sep 27, 2024
https://seclists.org/oss-sec/2024/q1/137
unknown
Secure Boot bypass in EDK2 based Virtual Machine firmware
Feb 14, 2024🔧 No Patch
Monitor edk2 in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.