SecAlerts
t

tianocore

Security Risk Profile

73
/100
high

Security Risk Score

Comprehensive risk assessment based on 74 vulnerabilities, EPSS scores, exploitation status, and remediation availability.

📅 Data spans from June 5, 2018 to present

74
Total CVEs
34
Critical+High
0
Exploited
7
Unpatched

Threat Assessment

Avg CVSS
6.7
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
7
Critical/High
Risk Level
73/100
high
🆕 1Fresh (<7d)📈 8 in Last 30 Days

Severity Distribution

Critical
5
High
29
Medium
30
Low
0

Exploit Likelihood

>50% chance
0
20-50%
0
5-20%
0
<5%
0

Age Distribution

Common Weaknesses (CWE)

1
Buffer Overflow
24
2
Integer Overflow
5
3
Infoleak
2
4
Weak RNG
2
5
Input Validation
2

Most Affected Products

1. Tianocore edk259
2. debian/edk244
3. ubuntu/edk238
4. Tianocore EDK II30
5. Microsoft .NET24

Recent Vulnerabilities

See more →
https://reddit.com/r/sysadmin/comments/1xhrqhu/edk2_pxe_flaw_found_that_allows_hijacking_of_a/
unknown

EDK2 PXE Flaw found that allows hijacking of a machine during network boot

Oct 28, 2026🔧 No Patch
https://reddit.com/r/netsec/comments/1xhrkjy/edk2_pxe_flaw_cve202697631_find_what_you_run/
unknown

EDK2 PXE Flaw (CVE-2026-97631): Find What You Run

Oct 28, 2026🔧 No Patch
https://seclists.org/oss-sec/2026/q4/411
unknown

CVE-2026-97631: P-boot RCE in EDK II PXE driver

Oct 28, 2026🔧 No Patch
https://reddit.com/r/sysadmin/comments/1xhfqs3/how_do_you_even_find_out_which_of_your_servers/
unknown

How do you even find out which of your servers have PXE boot on?

Oct 28, 2026🔧 No Patch
https://reddit.com/r/cybersecurity/comments/1xg56p9/heap_overflow_in_edk2s_brotli_decompressor_the/
unknown

Heap overflow in EDK2’s Brotli decompressor: the CVE-2021-28211 fix was applied to LZMA and never to Brotli

Oct 26, 2026🔧 No Patch
CVE-2026-97631
CVSS 9.5critical

Pre-boot RCE in EDK II PXE driver

Oct 22, 2026
CVE-2026-111497
CVSS 9.2critical

Portfolio Status: Impact of Brotli Vulnerability (CVE-2026-111497) on Palo Alto Networks Products

Oct 21, 2026
CVE-2024-13745
unknown

, EDK II: several issues with partition table measuments

May 29, 2026🔧 No Patch
https://seclists.org/oss-sec/2026/q2/727
unknown

CVE-2024-13745, EDK II: several issues with partition table measuments

May 29, 2026🔧 No Patch
CVE-2024-38798
CVSS 5.8medium

Uncleared password keystrokes in circular queue can lead to information disclosure or escalation of privilege

Dec 9, 2025

Monitor tianocore in Real-Time

Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.

Powered bySecAlerts

Monitor Your Software Stack in Real-Time

Get instant alerts when vulnerabilities are discovered in your software stack. Stay ahead of security threats with SecAlerts.

© 2026 SecAlerts Pty Ltd. All rights reserved.