Product
EDK II
- First Reported
- Oct 28, 2026
- Latest Reported
- Oct 30, 2026
Reported Context (4)
- A critical 16-year-old buffer overflow (CVE-2026-97631) in TianoCore EDK II, open source code that most of the world’s server vendors and data centers use through firmware suppliers such as AMI, Insyde and Phoenix, Security Roundup Covers Anthropic Intrusion Dispute, UEFI Flaw and Cloudflare AI Data Leak
- Tracked as CVE-2026-97631, the buffer overflow vulnerability lays in open-source project TianoCore's EDK II, the software development kit used to build Unified Extensible Firmware Interface firmware. The vendor's Critical EDK II Flaw Enables Pre-Boot Code Execution During PXE Boot
- A critical 16-year-old flaw in EDK II, the open-source code that most hardware makers use to build UEFI firmware, can allow an attacker to run code on a machine before its operating system loads, but only while the EDK II PXE Flaw Could Enable Pre-Secure Boot Code Execution
- EDK II (Brotli 1.2.0) Brotli Flaw Reaches File-Processing Workflows, Expanding Exposure
CVE (2)
Malware (1)
People (6)
Threat Actors (1)
MITRE ATT&CK (4)
Vendors (16)
Products (30)
Tools (2)
Industries (2)
Countries (6)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.