CVE-2019-0160

—

CVSS 3.1

9.8 critical

EPSS

1%p70

Published

Mar 27, 2019 (Mar 27, 2019)

Modified

Jun 17, 2026

Description

Buffer overflow in system firmware for EDK II may allow unauthenticated user to potentially enable escalation of privilege and/or denial of service via network access.

Vendors: tianocore opensuse fedoraproject redhat
Products: edk ii, leap, fedora, enterprise linux, enterprise linux eus, enterprise linux server, enterprise linux server aus, enterprise linux server tus
Weakness: CWE-120, CWE-787
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.3%)

In the news0 stories

No ingested article mentions this CVE yet.