TianoCore EDK II
Approved changes feed: RSS · Atom
cpe:2.3:a:tianocore:edk_ii:-:*:*:*:*:*:*:*part: a version: - update: *
| Vendor | Tianocore (ccbf46b2-b58a-5da6-848c-b10970eb3ad4) |
|---|---|
| Product | Edk Ii (5c887576-a049-5e2a-b50e-e7967638b475) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from NVD CPE 2.0 feed
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:bitbucket/tianocore/edk2 |
purl2cpe | 2026-06-01 10:18:20.988377 |
pkg:deb/debian/edk2 |
purl2cpe | 2026-06-01 10:18:20.988380 |
pkg:deb/ubuntu/edk2 |
purl2cpe | 2026-06-01 10:18:20.988382 |
pkg:github/tianocore/edk2 |
purl2cpe | 2026-06-01 10:18:20.988385 |
pkg:github/tianocore/tianocore.github.io |
purl2cpe | 2026-06-01 10:18:20.988388 |
pkg:rpm/centos/edk2 |
purl2cpe | 2026-06-01 10:18:20.988391 |
pkg:rpm/fedora/edk2 |
purl2cpe | 2026-06-01 10:18:20.988393 |
pkg:rpm/opensuse/edk2 |
purl2cpe | 2026-06-01 10:18:20.988396 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2021-28216 |
vulnerable | 2026-06-08 05:31:23.734381 |
Details available
BootPerformanceTable pointer is read from an NVRAM variable in PEI. Recommend setting PcdFirmwarePerformanceDataTableS3Support to FALSE.
Published: 2021-08-05T20:44:13.000Z
Updated: 2025-11-03T19:25:42.418Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-11098 |
vulnerable | 2026-06-08 05:12:35.043846 |
Details available
Insufficient input validation in MdeModulePkg in EDKII may allow an unauthenticated user to potentially enable escalation of privilege, denial of service and/or information disclosure via physical access.
Published: 2021-07-14T13:28:44.000Z
Updated: 2024-08-04T22:40:16.262Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-0161 |
vulnerable | 2026-06-08 05:12:18.828490 |
Details available
Stack overflow in XHCI for EDK II may allow an unauthenticated user to potentially enable denial of service via local access.
Published: 2019-03-27T19:23:44.000Z
Updated: 2024-08-04T17:44:14.759Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-0160 |
vulnerable | 2026-06-08 05:12:18.817869 |
Details available
HIGH (8.7)
Buffer overflow in system firmware for EDK II may allow unauthenticated user to potentially enable escalation of privilege and/or denial of service via network access.
Published: 2019-03-27T19:20:26.000Z
Updated: 2024-08-04T17:44:14.514Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-12183 |
vulnerable | 2026-06-08 05:10:40.199163 |
Details available
Stack overflow in DxeCore for EDK II may allow an unauthenticated user to potentially enable escalation of privilege, information disclosure and/or denial of service via local access.
Published: 2019-03-27T19:17:46.000Z
Updated: 2024-08-05T08:30:59.824Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-12182 |
vulnerable | 2026-06-08 05:10:40.198841 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-12181 |
vulnerable | 2026-06-08 05:10:40.198391 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-12180 |
vulnerable | 2026-06-08 05:10:40.197985 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-12179 |
vulnerable | 2026-06-08 05:10:40.197557 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-12178 |
vulnerable | 2026-06-08 05:10:40.197122 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.