Roundup: UEFI boot flaw, Anthropic access dispute, Cloudflare AI leak
The digest also covers suspected freezer tampering, an FEC filing outage, and breaches at Copenhagen and ENGIE.
62
Vendor
TianoCore
- Mentions · 7d7
- Mentions · 30d7
- All mentions7
- First seenOct 27, 2026
- Last mentioned6h ago
Timeline
7 articles · newest firstEDK II UEFI flaw CVE-2026-97631 can run code before the OS
A 16-year-old PXE ICMP buffer overflow, rated 9.5, was disclosed early after AMI published a fix.
78
16-year-old EDK II PXE buffer overflow runs code before Secure Boot
CVE-2026-97631 lets an adjacent-network attacker hang or hijack network boots on servers, and no stable EDK II release ships the fix yet.
70
CVE-2026-97631 lets attackers run code before the OS on EDK II PXE boots
An unauthenticated ICMP sender can overflow a 504-byte field during PXE boot; AMI’s fix surfaced early and affected devices remain unclear.
74
EDK II PXE boot flaw can run code before the OS loads (CVE-2026-97631)
Oversized ICMP errors can corrupt firmware memory only while a machine is PXE-booting; TianoCore merged a fix on October 15.
72
EDK II PXE flaw CVE-2026-97631 allows pre-boot code execution
One ICMP error during network boot can crash the client or, on a known build, run code before Secure Boot; vendor updates are still pending.
66
EDK2 UEFI bug CVE-2026-97631 enables pre-boot code execution
A 16-year-old buffer overflow in the PXE ICMP parser scores 9.5; an early AMI patch made the bug public before the planned January disclosure.
78
Related CVEs
by mentions- CVE-2026-97631<1%9.5Remote buffer overflow in EDK2 BIOS
Appears with
- EDK IIproduct · 7
- AMIvendor · 5
- Googleorganization · 4
- Insydevendor · 4
- Project Muproduct · 4
- Anthropicorganization · 4
- Microsoftvendor · 4
- Phoenixvendor · 3
- SUSEvendor · 1
- University of Copenhagenvictim · 1
- UefiPxeBcDxeproduct · 1
- Phoenix Technologiesvendor · 1
- Federal Election Commissionvictim · 1
- Anthropicvendor · 1
- GLM 5.3ai model · 1
- UEFI Forumorganization · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.