https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T04:08:57.738150+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2024:5297 ALSA-2024:5297 — Moderate: edk2 security update 2026-10-03T04:08:57.972967+00:00

Affected: AlmaLinux:8: edk2-aarch64, AlmaLinux:8: edk2-ovmf

EDK (Embedded Development Kit) is a project to enable UEFI support for Virtual Machines. This package contains a sample 64-bit UEFI firmware for QEMU and KVM.

Security Fix(es):

* edk2: Predictable TCP Initial Sequence Numbers (CVE-2023-45236) * edk2: Use of a Weak PseudoRandom Number Generator (CVE-2023-45237) * edk2: Temporary DoS vulnerability (CVE-2024-1298)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/bdu:2025-12007 bdu:2025-12007 2026-10-03T04:08:57.973030+00:00 bdu:2025-12007 https://cve.radiocsirt.org/vuln/bell-cve-2024-1298 BELL-CVE-2024-1298 2026-10-03T04:08:57.973047+00:00

Affected: Alpaquita:23: edk2, Alpaquita:stream: edk2

 https://cve.radiocsirt.org/vuln/euvd-2026-257718 EUVD-2026-257718 2026-10-03T04:08:57.973067+00:00 EUVD-2026-257718 https://cve.radiocsirt.org/vuln/fkie_cve-2024-1298 fkie_cve-2024-1298 2026-10-03T04:08:57.973078+00:00

EDK2 contains a vulnerability when S3 sleep is activated where an Attacker may cause a Division-By-Zero due to a UNIT32 overflow via local access. A successful exploit of this vulnerability may lead to a loss of Availability.

 https://cve.radiocsirt.org/vuln/ghsa-xvcj-qw55-xx42 GHSA-xvcj-qw55-xx42 2026-10-03T04:08:57.973099+00:00

EDK2 contains a vulnerability when S3 sleep is activated where an Attacker may cause a Division-By-Zero due to a UNIT32 overflow via local access. A successful exploit of this vulnerability may lead to a loss of Availability.

 https://cve.radiocsirt.org/vuln/gsd-2024-1298 gsd-2024-1298 2026-10-03T04:08:57.973113+00:00 gsd-2024-1298 https://cve.radiocsirt.org/vuln/msrc_cve-2024-1298 msrc_CVE-2024-1298 — Integer Overflow caused by divide by zero during S3 suspension 2026-10-03T04:08:57.973123+00:00 msrc_CVE-2024-1298 https://cve.radiocsirt.org/vuln/oesa-2024-1752 OESA-2024-1752 — edk2 security update 2026-10-03T04:08:57.973139+00:00

Affected: openEuler:20.03-LTS-SP4: edk2, openEuler:22.03-LTS-SP1: edk2, openEuler:22.03-LTS-SP3: edk2, openEuler:24.03-LTS: edk2

EDK II is a modern, feature-rich, cross-platform firmware development environment for the UEFI and PI specifications. Security Fix(es): EDK2 contains a vulnerability when S3 sleep is activated where an Attacker may cause a Division-By-Zero due to a UNIT32 overflow via local access. A successful exploit of this vulnerability may lead to a loss of Availability.(CVE-2024-1298)

 https://cve.radiocsirt.org/vuln/rhsa-2024:4747 RHSA-2024:4747 — Red Hat Security Advisory: edk2 security update 2026-10-03T04:08:57.973164+00:00

edk2: Temporary DoS vulnerability

 https://cve.radiocsirt.org/vuln/rhsa-2024:5297 RHSA-2024:5297 — Red Hat Security Advisory: edk2 security update 2026-10-03T04:08:57.973180+00:00

edk2: Predictable TCP Initial Sequence Numbers edk2: Use of a Weak PseudoRandom Number Generator edk2: Temporary DoS vulnerability

 https://cve.radiocsirt.org/vuln/suse-su-2024:4088-1 SUSE-SU-2024:4088-1 — Security update for ovmf 2026-10-03T04:08:57.973197+00:00

Security update for ovmf

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-1298 UBUNTU-CVE-2024-1298 2026-10-03T04:08:57.973211+00:00

Affected: Ubuntu:Pro:16.04:LTS: edk2, Ubuntu:Pro:18.04:LTS: edk2, Ubuntu:20.04:LTS: edk2, Ubuntu:22.04:LTS: edk2, Ubuntu:24.04:LTS: edk2

EDK2 contains a vulnerability when S3 sleep is activated where an Attacker may cause a Division-By-Zero due to a UNIT32 overflow via local access. A successful exploit of this vulnerability may lead to a loss of Availability.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1274 WID-SEC-W-2024-1274 — TianoCore EDK2: Schwachstelle ermöglicht Denial of Service 2026-10-03T04:08:57.973234+00:00

Ein lokaler Angreifer kann eine Schwachstelle in TianoCore EDK2 ausnutzen, um einen Denial of Service Angriff durchzuführen.