https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T16:31:35.982914+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2024:2264 ALSA-2024:2264 — Important: edk2 security update 2026-10-02T16:31:36.155859+00:00

Affected: AlmaLinux:9: edk2-aarch64, AlmaLinux:9: edk2-ovmf, AlmaLinux:9: edk2-tools, AlmaLinux:9: edk2-tools-doc

EDK (Embedded Development Kit) is a project to enable UEFI support for Virtual Machines. This package contains a sample 64-bit UEFI firmware for QEMU and KVM.

Security Fix(es):

* edk2: Buffer overflow when handling Server ID option from a DHCPv6 proxy Advertise message (CVE-2023-45235) * EDK2: heap buffer overflow in Tcg2MeasureGptTable() (CVE-2022-36763) * EDK2: heap buffer overflow in Tcg2MeasurePeImage() (CVE-2022-36764) * edk2: Integer underflow when processing IA_NA/IA_TA options in a DHCPv6 Advertise message (CVE-2023-45229) * edk2: Out of Bounds read when handling a ND Redirect message with truncated options (CVE-2023-45231) * edk2: Infinite loop when parsing unknown options in the Destination Options header (CVE-2023-45232) * edk2: Infinite loop when parsing a PadN option in the Destination Options header (CVE-2023-45233) * openssl: Excessive time spent checking DH keys and parameters (CVE-2023-3446)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

 https://cve.radiocsirt.org/vuln/bdu:2024-01538 bdu:2024-01538 2026-10-02T16:31:36.155934+00:00 bdu:2024-01538 https://cve.radiocsirt.org/vuln/bell-cve-2022-36763 BELL-CVE-2022-36763 2026-10-02T16:31:36.155951+00:00

Affected: Alpaquita:23: edk2, Alpaquita:25: edk2, Alpaquita:stream: edk2

 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0679 certfr-2024-avi-0679 — De multiples vulnérabilités ont été découvertes dans les produits Intel. Certaines d'entre elles permettent à un attaqu… 2026-10-02T16:31:36.155972+00:00 certfr-2024-avi-0679 https://cve.radiocsirt.org/vuln/euvd-2026-257673 EUVD-2026-257673 2026-10-02T16:31:36.155988+00:00 EUVD-2026-257673 https://cve.radiocsirt.org/vuln/fkie_cve-2022-36763 fkie_cve-2022-36763 2026-10-02T16:31:36.155998+00:00

EDK2 is susceptible to a vulnerability in the Tcg2MeasureGptTable() function, allowing a user to trigger a heap buffer overflow via a local network. Successful exploitation of this vulnerability may result in a compromise of confidentiality, integrity, and/or availability.

 https://cve.radiocsirt.org/vuln/gsd-2022-36763 gsd-2022-36763 2026-10-02T16:31:36.156019+00:00 gsd-2022-36763 https://cve.radiocsirt.org/vuln/msrc_cve-2022-36763 msrc_CVE-2022-36763 — Heap Buffer Overflow in Tcg2MeasureGptTable 2026-10-02T16:31:36.156030+00:00 msrc_CVE-2022-36763 https://cve.radiocsirt.org/vuln/oesa-2024-2022 OESA-2024-2022 — edk2 security update 2026-10-02T16:31:36.156044+00:00

Affected: openEuler:22.03-LTS-SP3: edk2

EDK II is a modern, feature-rich, cross-platform firmware development environment for the UEFI and PI specifications. Security Fix(es):

EDK2 is susceptible to a vulnerability in the Tcg2MeasureGptTable() function, allowing a user to trigger a heap buffer overflow via a local network. Successful exploitation of this vulnerability may result in a compromise of confidentiality, integrity, and/or availability. (CVE-2022-36763)

 https://cve.radiocsirt.org/vuln/opensuse-su-2024:13949-1 openSUSE-SU-2024:13949-1 — ovmf-202308-9.1 on GA media 2026-10-02T16:31:36.156066+00:00

ovmf-202308-9.1 on GA media

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-36763 UBUNTU-CVE-2022-36763 2026-10-02T16:31:36.156082+00:00

Affected: Ubuntu:Pro:16.04:LTS: edk2, Ubuntu:Pro:18.04:LTS: edk2, Ubuntu:20.04:LTS: edk2, Ubuntu:22.04:LTS: edk2

EDK2 is susceptible to a vulnerability in the Tcg2MeasureGptTable() function, allowing a user to trigger a heap buffer overflow via a local network. Successful exploitation of this vulnerability may result in a compromise of confidentiality, integrity, and/or availability.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0050 WID-SEC-W-2024-0050 — Insyde UEFI Firmware: Mehrere Schwachstellen ermöglichen Codeausführung 2026-10-02T16:31:36.156104+00:00

Ein lokaler Angreifer kann mehrere Schwachstellen in Insyde UEFI Firmware ausnutzen, um beliebigen Programmcode auszuführen.