https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 23:52:10 +0000 https://cve.radiocsirt.org/vuln/alsa-2026:18465 <p><strong>Affected:</strong> AlmaLinux:10: edk2-aarch64, AlmaLinux:10: edk2-ovmf, AlmaLinux:10: edk2-tools, AlmaLinux:10: edk2-tools-doc</p> <p>EDK (Embedded Development Kit) is a project to enable UEFI support for Virtual Machines. This package contains a sample 64-bit UEFI firmware for QEMU and KVM.</p> <p>Security Fix(es):</p> <p>* edk2: EDK2: Improper Input Validation allows arbitrary command execution (CVE-2025-2296)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p>Additional Changes:</p> <p>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</p> <p><strong>Affected:</strong> AlmaLinux:10: edk2-aarch64, AlmaLinux:10: edk2-ovmf, AlmaLinux:10: edk2-tools, AlmaLinux:10: edk2-tools-doc</p> <p>EDK (Embedded Development Kit) is a project to enable UEFI support for Virtual Machines. This package contains a sample 64-bit UEFI firmware for QEMU and KVM.</p> <p>Security Fix(es):</p> <p>* edk2: EDK2: Improper Input Validation allows arbitrary command execution (CVE-2025-2296)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p>Additional Changes:</p> <p>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</p> https://cve.radiocsirt.org/vuln/alsa-2026:18465 https://cve.radiocsirt.org/vuln/bell-cve-2025-2296 <p><strong>Affected:</strong> Alpaquita:23: edk2, Alpaquita:25: edk2, Alpaquita:stream: edk2</p> <p><strong>Affected:</strong> Alpaquita:23: edk2, Alpaquita:25: edk2, Alpaquita:stream: edk2</p> https://cve.radiocsirt.org/vuln/bell-cve-2025-2296 https://cve.radiocsirt.org/vuln/euvd-2026-262903 EUVD-2026-262903 https://cve.radiocsirt.org/vuln/euvd-2026-262903 https://cve.radiocsirt.org/vuln/fkie_cve-2025-2296 <p>EDK2 contains a vulnerability in BIOS where an attacker may cause “ Improper Input Validation” by local access. Successful exploitation of this vulnerability could alter control flow in unexpected ways, potentially allowing arbitrary command execution and impacting Confidentiality, Integrity, and Availability.</p> <p>EDK2 contains a vulnerability in BIOS where an attacker may cause “ Improper Input Validation” by local access. Successful exploitation of this vulnerability could alter control flow in unexpected ways, potentially allowing arbitrary command execution and impacting Confidentiality, Integrity, and Availability.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-2296 https://cve.radiocsirt.org/vuln/ghsa-3f33-424w-8gqc <p>EDK2 contains a vulnerability in BIOS where an attacker may cause “ Improper Input Validation” by local access. Successful exploitation of this vulnerability could alter control flow in unexpected ways, potentially allowing arbitrary command execution and impacting Confidentiality, Integrity, and Availability.</p> <p>EDK2 contains a vulnerability in BIOS where an attacker may cause “ Improper Input Validation” by local access. Successful exploitation of this vulnerability could alter control flow in unexpected ways, potentially allowing arbitrary command execution and impacting Confidentiality, Integrity, and Availability.</p> https://cve.radiocsirt.org/vuln/ghsa-3f33-424w-8gqc https://cve.radiocsirt.org/vuln/msrc_cve-2025-2296 msrc_CVE-2025-2296 https://cve.radiocsirt.org/vuln/msrc_cve-2025-2296 https://cve.radiocsirt.org/vuln/opensuse-su-2026:10467-1 <p>ovmf-202602-6.1 on GA media</p> <p>ovmf-202602-6.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2026:10467-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-2296 <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: edk2, Ubuntu:Pro:18.04:LTS: edk2, Ubuntu:20.04:LTS: edk2, Ubuntu:22.04:LTS: edk2, Ubuntu:24.04:LTS: edk2, Ubuntu:25.10: edk2</p> <p>EDK2 contains a vulnerability in BIOS where an attacker may cause “ Improper Input Validation” by local access. Successful exploitation of this vulnerability could alter control flow in unexpected ways, potentially allowing arbitrary command execution and impacting Confidentiality, Integrity, and Availability.</p> <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: edk2, Ubuntu:Pro:18.04:LTS: edk2, Ubuntu:20.04:LTS: edk2, Ubuntu:22.04:LTS: edk2, Ubuntu:24.04:LTS: edk2, Ubuntu:25.10: edk2</p> <p>EDK2 contains a vulnerability in BIOS where an attacker may cause “ Improper Input Validation” by local access. Successful exploitation of this vulnerability could alter control flow in unexpected ways, potentially allowing arbitrary command execution and impacting Confidentiality, Integrity, and Availability.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-2296 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2805 <p>Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in TianoCore EDK2 ausnutzen, um beliebigen Programmcode auszuführen.</p> <p>Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in TianoCore EDK2 ausnutzen, um beliebigen Programmcode auszuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2805