Vendor
A vulnerability in the TianoCore EDK2 PXE driver enables a remote, unauthenticated attacker to execute arbitrary code with Ring-0 privileges or trigger a denial-of-service condition.