CVE-2025-2296: high-severity vulnerability in TianoCore EDK2
Un-verified kernel bypass Secure Boot mechanism in direct boot mode
Published
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
21Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 8.4epss 0.8%
EDK2 contains a vulnerability in BIOS where an attacker may cause “ Improper Input Validation” by local access. Successful exploitation of this vulnerability could alter control flow in unexpected ways, potentially allowing arbitrary command execution and impacting Confidentiality, Integrity, and Availability.
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:H/VA:L/SC:L/SI:H/SA:L
Affected products
TianoCore · EDK2Related CVEs — TianoCore EDK2
In the same product, most dangerous first.
CVE-2026-97631CRITICALPre-boot RCE in EDK II PXE driverEPSS 0.6%CVE-2024-38796MEDIUMInteger overflow in PeCoffLoaderRelocateImageEPSS 0.4%CVE-2025-2295LOWPotential iSCSI R2T PDU VulnerabilityEPSS 0.2%CVE-2024-38805MEDIUMiSCSI Remote Memory Corruption and Denial of ServiceEPSS 0.2%CVE-2024-38797MEDIUMOut-of-bounds Read in HashPeImageByType()EPSS 0.2%CVE-2025-3770HIGHSMM IDT Privilege Escalation VulnerabilityEPSS 0.2%