CVE-2023-49721

—

CVSS 3.1

6.7 medium

EPSS

<1%p15

Published

Feb 14, 2024 (Feb 14, 2024)

Modified

Jun 17, 2026

Description

An insecure default to allow UEFI Shell in EDK2 was left enabled in LXD. This allows an OS-resident attacker to bypass Secure Boot.

Vendors: canonical tianocore
Products: lxd, edk2
Weakness: CWE-276
Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.2%)

In the news0 stories

No ingested article mentions this CVE yet.