Vulnerabilities (CVE)

Filtered by vendor Tianocore Subscribe
Filtered by product Edk Ii
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2019-11098 1 Tianocore 1 Edk Ii 2021-07-20 4.6 MEDIUM 6.8 MEDIUM
Insufficient input validation in MdeModulePkg in EDKII may allow an unauthenticated user to potentially enable escalation of privilege, denial of service and/or information disclosure via physical access.
CVE-2019-0161 1 Tianocore 1 Edk Ii 2021-04-29 2.1 LOW 5.5 MEDIUM
Stack overflow in XHCI for EDK II may allow an unauthenticated user to potentially enable denial of service via local access.
CVE-2018-12181 1 Tianocore 1 Edk Ii 2020-08-24 3.6 LOW 6.0 MEDIUM
Stack overflow in corrupted bmp for EDK II may allow unprivileged user to potentially enable denial of service or elevation of privilege via local access.
CVE-2018-12183 1 Tianocore 1 Edk Ii 2019-10-03 4.6 MEDIUM 6.8 MEDIUM
Stack overflow in DxeCore for EDK II may allow an unauthenticated user to potentially enable escalation of privilege, information disclosure and/or denial of service via local access.
CVE-2018-12182 1 Tianocore 1 Edk Ii 2019-04-11 4.6 MEDIUM 6.7 MEDIUM
Insufficient memory write check in SMM service for EDK II may allow an authenticated user to potentially enable escalation of privilege, information disclosure and/or denial of service via local access.