vulnerability
Ubuntu: USN-6920-1 (CVE-2018-12183): EDK II vulnerabilities
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 5 | (AV:L/AC:L/Au:N/C:P/I:P/A:P) | Mar 27, 2019 | Jul 31, 2024 | Mar 27, 2026 |
Severity
5
CVSS
(AV:L/AC:L/Au:N/C:P/I:P/A:P)
Published
Mar 27, 2019
Added
Jul 31, 2024
Modified
Mar 27, 2026
Description
Stack overflow in DxeCore for EDK II may allow an unauthenticated user to potentially enable escalation of privilege, information disclosure and/or denial of service via local access.
Solutions
ubuntu-pro-upgrade-ovmfubuntu-pro-upgrade-qemu-efiubuntu-pro-upgrade-qemu-efi-aarch64ubuntu-pro-upgrade-qemu-efi-arm
Rapid7 Labs
2026 Global Threat Landscape Report
The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.