EDK2 contains a vulnerability in BIOS where an attacker may cause “ Improper Input Validation” by local access. Successful exploitation of this vulnerability could alter control flow in unexpected ways, potentially allowing arbitrary command execution and impacting Confidentiality, Integrity, and Availability.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade edk2-tools-docUpgrade edk2-aarch64Upgrade edk2-toolsUpgrade edk2-ovmfUpgrade edk2-debuginfo | May 20, 2026 | May 20, 2026 |
| Debian | — | Upgrade edk2 | Jul 23, 2026 | Jul 23, 2026 |
| Redhat_linux | — | Upgrade edk2-toolsUpgrade edk2-debugsourceUpgrade edk2-tools-docUpgrade edk2-ovmfUpgrade edk2-tools-debuginfoNo solution existsUpgrade edk2-aarch64 | May 20, 2026 | Dec 9, 2025 |
| Rocky_linux | — | Upgrade edk2-tools-debuginfoUpgrade edk2-debugsourceUpgrade edk2-tools | Jun 1, 2026 | May 29, 2026 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub