vulnerability

Debian: CVE-2023-48733: edk2 -- security update

Try Surface Command
Back to search
Severity
7
CVSS
(AV:L/AC:L/Au:M/C:C/I:C/A:C)
Published
Feb 14, 2024
Added
Feb 23, 2024
Modified
Aug 15, 2025

Description

An insecure default to allow UEFI Shell in EDK2 was left enabled in Ubuntu's EDK2. This allows an OS-resident attacker to bypass Secure Boot.

Solution

debian-upgrade-edk2

References

Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.

Try it today