CVE-2026-97631
Pre-boot RCE in EDK II PXE driver
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
EDK2 contains a vulnerability in BIOS where a user may cause “Out-of-bounds Write”, Classic Buffer Overflow, and “Incorrect Calculation of Buffer Size” by remote access. Successful exploitation of this vulnerability can lead to arbitrary code execution. It could also impact Confidentiality, Integrity, and Availability.
| CWE | CWE-120 CWE-131 CWE-787 |
| Vendor | tianocore |
| Product | edk2 |
| Published | Oct 22, 2026 |
| Last Updated | Oct 22, 2026 |
Stay Ahead of the Next One
Get instant alerts for tianocore edk2
Be the first to know when new unknown vulnerabilities affecting tianocore edk2 are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
TianoCore / EDK2
0 ≤ edk2-stable202608
References
Credits
Alex Matrosov (Anthropic) Dan Holmes-Mitra (Google)