EDK II

Search everything

Mentions · 7d8
Mentions · 30d9
All mentions9
First seenOct 5, 2026
Last mentioned6h ago

Timeline

9 articles · newest first

Roundup: UEFI boot flaw, Anthropic access dispute, Cloudflare AI leak

The digest also covers suspected freezer tampering, an FEC filing outage, and breaches at Copenhagen and ENGIE.

SecurityWeek14:41 UTC · 6h agoVulnerabilityCVE-2026-976311

EDK II UEFI flaw CVE-2026-97631 can run code before the OS

A 16-year-old PXE ICMP buffer overflow, rated 9.5, was disclosed early after AMI published a fix.

WIRED · Securityupdated 06:59 UTC · 13h agofirst Oct 28, 20:30 UTC · 2d agoVulnerability 10 sourcesCVE-2026-976311

CVE-2026-97631: unauthenticated pre-boot RCE in EDK II PXE driver

An attacker on the network can execute code during IPv4 or IPv6 PXE boot via ICMP error messages, affecting UEFI firmware on many servers.

oss-securityupdated 06:59 UTC · 13h agofirst Oct 28, 13:58 UTC · 2d agoVulnerability 10 sourcesCVE-2026-976311

16-year-old EDK II PXE buffer overflow runs code before Secure Boot

CVE-2026-97631 lets an adjacent-network attacker hang or hijack network boots on servers, and no stable EDK II release ships the fix yet.

The Hacker Newsupdated 06:59 UTC · 13h agofirst Oct 28, 11:50 UTC · 2d agoVulnerability 10 sourcesCVE-2026-976311

CVE-2026-97631 lets attackers run code before the OS on EDK II PXE boots

An unauthenticated ICMP sender can overflow a 504-byte field during PXE boot; AMI’s fix surfaced early and affected devices remain unclear.

Security Affairsupdated 06:59 UTC · 13h agofirst Oct 28, 11:15 UTC · 2d agoVulnerability 10 sourcesCVE-2026-976311

EDK II PXE boot flaw can run code before the OS loads (CVE-2026-97631)

Oversized ICMP errors can corrupt firmware memory only while a machine is PXE-booting; TianoCore merged a fix on October 15.

GBHackersupdated 06:59 UTC · 13h agofirst Oct 28, 08:46 UTC · 2d agoVulnerability 10 sourcesCVE-2026-976311

EDK II PXE flaw CVE-2026-97631 allows pre-boot code execution

One ICMP error during network boot can crash the client or, on a known build, run code before Secure Boot; vendor updates are still pending.

Cyber Security Newsupdated 06:59 UTC · 13h agofirst Oct 28, 02:36 UTC · 2d agoVulnerability 10 sourcesCVE-2026-976311

EDK2 UEFI bug CVE-2026-97631 enables pre-boot code execution

A 16-year-old buffer overflow in the PXE ICMP parser scores 9.5; an early AMI patch made the bug public before the planned January disclosure.

Ars Technica · Securityupdated 06:59 UTC · 13h agofirst Oct 27, 20:25 UTC · 3d agoVulnerability 10 sourcesCVE-2026-976311

USN-8865-1: EDK II vulnerabilities

Ubuntu patched EDK II OpenSSL flaws that could cause denial of service, including a heap overflow.

Ubuntu Security NoticesOct 5, 11:06 UTC · 25d agoAdvisoryCVE-2026-63072 CVE-2026-630762 · 1 read

Related CVEs

by mentions

CVE-2026-97631<1%9.5
Remote buffer overflow in EDK2 BIOS
published 8d agoEDK2PoC ×3
CVE-2026-63072<1%7.5
Issue summary: OpenSSL CMS decryption sizes the key-unwrap output buffer based on querying the unwrapped key size, but the AES-WRAP-PAD unwrap primitive can…
published Aug 25, 2026openssl openssl
CVE-2026-630761%7.5
Issue summary: OpenSSL CMP password based protection verification only checks whether the protectionAlg parameter was not NULL and not its ASN.1 type, before…
published Aug 25, 2026openssl openssl

Appears with

TianoCorevendor · 7
AMIvendor · 5
Microsoftvendor · 4
Project Muproduct · 4
Anthropicorganization · 4
Googleorganization · 4
Insydevendor · 4
Phoenixvendor · 3
Debianvendor · 1
SGLangproduct · 1
edk2product · 1
Cathedralorganization · 1
Canonicalvendor · 1
SUSEvendor · 1
Workers AIproduct · 1
Intelvendor · 1

Entities are extracted by the model from each article. First seen Oct 5, 2026, last mentioned 6h ago. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.