Skip to content
Threat Feed
Subscribe

Vendor

Insyde

4 briefs RSS
critical advisory

TianoCore EDK II: ICMP-based buffer overflow in PXE Base Code driver (CVE-2026-97631)

A critical 16-year-old memory corruption flaw (CVE-2026-97631) in the EDK II PXE-Base Code driver allows attackers on the local network to execute arbitrary code with Ring 0 privileges during the early boot sequence.

PoC TianoCore EDK II +2 vulnerability firmware edk2 uefi pxe
2t 1c updated
medium advisory

Information Disclosure Vulnerability in Insyde UEFI Firmware

A local attacker can exploit a vulnerability in Insyde UEFI firmware to gain unauthorized access to sensitive information during the system boot or runtime.

UEFI Firmware firmware vulnerability information-disclosure
1t
high advisory

Insyde UEFI Firmware Vulnerability Allows Code Execution

A local attacker can exploit a vulnerability in Insyde UEFI Firmware to execute arbitrary program code, potentially leading to privilege escalation and system compromise.

UEFI Firmware uefi firmware code-execution privilege-escalation
2r 2t
high advisory

Insyde UEFI Firmware Vulnerabilities Allow Local Privilege Escalation

Multiple vulnerabilities in Insyde UEFI Firmware allow a local attacker to execute arbitrary code with administrator privileges.

UEFI Firmware uefi privilege-escalation firmware
2r 1t