https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T23:52:27.110191+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2026:18465 ALSA-2026:18465 — Important: edk2 security update 2026-10-02T23:52:27.115993+00:00

Affected: AlmaLinux:10: edk2-aarch64, AlmaLinux:10: edk2-ovmf, AlmaLinux:10: edk2-tools, AlmaLinux:10: edk2-tools-doc

EDK (Embedded Development Kit) is a project to enable UEFI support for Virtual Machines. This package contains a sample 64-bit UEFI firmware for QEMU and KVM.

Security Fix(es):

* edk2: EDK2: Improper Input Validation allows arbitrary command execution (CVE-2025-2296)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

 https://cve.radiocsirt.org/vuln/bell-cve-2025-2296 BELL-CVE-2025-2296 2026-10-02T23:52:27.116054+00:00

Affected: Alpaquita:23: edk2, Alpaquita:25: edk2, Alpaquita:stream: edk2

 https://cve.radiocsirt.org/vuln/euvd-2026-262903 EUVD-2026-262903 2026-10-02T23:52:27.116078+00:00 EUVD-2026-262903 https://cve.radiocsirt.org/vuln/fkie_cve-2025-2296 fkie_cve-2025-2296 2026-10-02T23:52:27.116090+00:00

EDK2 contains a vulnerability in BIOS where an attacker may cause “ Improper Input Validation” by local access. Successful exploitation of this vulnerability could alter control flow in unexpected ways, potentially allowing arbitrary command execution and impacting Confidentiality, Integrity, and Availability.

 https://cve.radiocsirt.org/vuln/ghsa-3f33-424w-8gqc GHSA-3f33-424w-8gqc 2026-10-02T23:52:27.116114+00:00

EDK2 contains a vulnerability in BIOS where an attacker may cause “ Improper Input Validation” by local access. Successful exploitation of this vulnerability could alter control flow in unexpected ways, potentially allowing arbitrary command execution and impacting Confidentiality, Integrity, and Availability.

 https://cve.radiocsirt.org/vuln/msrc_cve-2025-2296 msrc_CVE-2025-2296 — Un-verified kernel bypass Secure Boot mechanism in direct boot mode 2026-10-02T23:52:27.116129+00:00 msrc_CVE-2025-2296 https://cve.radiocsirt.org/vuln/opensuse-su-2026:10467-1 openSUSE-SU-2026:10467-1 — ovmf-202602-6.1 on GA media 2026-10-02T23:52:27.116144+00:00

ovmf-202602-6.1 on GA media

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-2296 UBUNTU-CVE-2025-2296 2026-10-02T23:52:27.116158+00:00

Affected: Ubuntu:Pro:16.04:LTS: edk2, Ubuntu:Pro:18.04:LTS: edk2, Ubuntu:20.04:LTS: edk2, Ubuntu:22.04:LTS: edk2, Ubuntu:24.04:LTS: edk2, Ubuntu:25.10: edk2

EDK2 contains a vulnerability in BIOS where an attacker may cause “ Improper Input Validation” by local access. Successful exploitation of this vulnerability could alter control flow in unexpected ways, potentially allowing arbitrary command execution and impacting Confidentiality, Integrity, and Availability.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2805 WID-SEC-W-2025-2805 — TianoCore EDK2: Schwachstelle ermöglicht Codeausführung 2026-10-02T23:52:27.116183+00:00

Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in TianoCore EDK2 ausnutzen, um beliebigen Programmcode auszuführen.