CVE Tools
Track your stack

Tianocore

23 CVEs tracked since 2020. Since Nov 2020, none of them reached CISA KEV.

Tianocore CVEs per month

Nov 2020 to Jan 2024. Point at a month, or focus the strip and use the arrow keys.
Tianocore CVEs per month, with the share now in CISA KEV
MonthCVEsIn CISA KEV
2020-1170
2020-12null or fewer
2021-01null or fewer
2021-02null or fewer
2021-03null or fewer
2021-04null or fewer
2021-05null or fewer
2021-0640
2021-07null or fewer
2021-08null or fewer
2021-09null or fewer
2021-10null or fewer
2021-11null or fewer
2021-12null or fewer
2022-01null or fewer
2022-02null or fewer
2022-03null or fewer
2022-04null or fewer
2022-05null or fewer
2022-06null or fewer
2022-07null or fewer
2022-08null or fewer
2022-09null or fewer
2022-10null or fewer
2022-11null or fewer
2022-12null or fewer
2023-01null or fewer
2023-02null or fewer
2023-03null or fewer
2023-04null or fewer
2023-05null or fewer
2023-06null or fewer
2023-07null or fewer
2023-08null or fewer
2023-09null or fewer
2023-10null or fewer
2023-11null or fewer
2023-12null or fewer
2024-01120

Products

The products that kept showing up in Tianocore's monthly top three, with their CVEs summed over those months.

  1. EDK2233 months
  2. Edk Ii31 month

Latest CVEs

The 15 most recently published vulnerabilities affecting Tianocore.

  1. CVE-2025-2296Un-verified kernel bypass Secure Boot mechanism in direct boot mode—
  2. CVE-2024-38798Uncleared password keystrokes in circular queue can lead to information disclosure or escalation of privilege7.0
  3. CVE-2025-2486UEFI Shell accessible in AAVMF with Secure Boot enabled on Ubuntu8.8
  4. CVE-2024-38805iSCSI Remote Memory Corruption and Denial of Service6.3
  5. CVE-2025-3770SMM IDT Privilege Escalation Vulnerability7.0
  6. CVE-2024-38797Out-of-bounds Read in HashPeImageByType()4.6
  7. CVE-2025-2295Potential iSCSI R2T PDU Vulnerability3.5
  8. CVE-2024-38796Integer overflow in PeCoffLoaderRelocateImage5.9
  9. CVE-2024-1298Integer Overflow caused by divide by zero during S3 suspension6.0
  10. CVE-2023-49721An insecure default to allow UEFI Shell in EDK2 was left enabled in LXD. This allows an OS-resident attacker to bypass Secure Boot.6.7
  11. CVE-2023-48733An insecure default to allow UEFI Shell in EDK2 was left enabled in Ubuntu's EDK2. This allows an OS-resident attacker to bypass Secure Boot.6.7
  12. CVE-2023-45234Buffer Overflow in EDK II Network Package8.3
  13. CVE-2023-45233Infinite loop in EDK II Network Package7.5
  14. CVE-2023-45232Infinite loop in EDK II Network Package7.5
  15. CVE-2023-45235Buffer Overflow in EDK II Network Package8.3

The record

Peak rank
#57 in Nov 2020
Busiest month shown
Jan 2024, 12 CVEs
Months with a KEV entry
0 since Nov 2020
Monthly snapshots
3 since 2020
Tianocore's full record, month by month

We use analytics cookies to see which pages and articles actually help people. Decline and none of them run — the site works the same. What we store