# cve.now: Tianocore

The newest entries naming Tianocore as an affected vendor (up to 200), of 30 in all, 0 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2026-14968](https://cve.now/CVE-2026-14968.md): AMD MmSaveStateLib SysCall path performs out-of-bounds writes for partial save-state reads (CVSS 7.0)
- [CVE-2026-18448](https://cve.now/CVE-2026-18448.md): Leak SMM RAM from the kernel (Simply TSA after an SMI) (CVSS 5.6)
- [CVE-2026-97631](https://cve.now/CVE-2026-97631.md): Pre-boot RCE in EDK II PXE driver (CVSS 9.5)
- [CVE-2025-2296](https://cve.now/CVE-2025-2296.md): Un-verified kernel bypass Secure Boot mechanism in direct boot mode (CVSS 8.4)
- [CVE-2024-38798](https://cve.now/CVE-2024-38798.md): Uncleared password keystrokes in circular queue can lead to information disclosure or escalation of privilege (CVSS 5.8)
- [CVE-2024-38805](https://cve.now/CVE-2024-38805.md): iSCSI Remote Memory Corruption and Denial of Service (CVSS 6.3)
- [CVE-2025-3770](https://cve.now/CVE-2025-3770.md): SMM IDT Privilege Escalation Vulnerability (CVSS 7.0)
- [CVE-2024-38797](https://cve.now/CVE-2024-38797.md): Out-of-bounds Read in HashPeImageByType() (CVSS 4.6)
- [CVE-2025-2295](https://cve.now/CVE-2025-2295.md): Potential iSCSI R2T PDU Vulnerability (CVSS 3.5)
- [CVE-2024-38796](https://cve.now/CVE-2024-38796.md): Integer overflow in PeCoffLoaderRelocateImage (CVSS 5.9)
- [CVE-2024-1298](https://cve.now/CVE-2024-1298.md): Integer Overflow caused by divide by zero during S3 suspension (CVSS 6.0)
- [CVE-2023-45234](https://cve.now/CVE-2023-45234.md): Buffer Overflow in EDK II Network Package (CVSS 8.3)
- [CVE-2023-45233](https://cve.now/CVE-2023-45233.md): Infinite loop in EDK II Network Package (CVSS 7.5)
- [CVE-2023-45232](https://cve.now/CVE-2023-45232.md): Infinite loop in EDK II Network Package (CVSS 7.5)
- [CVE-2023-45235](https://cve.now/CVE-2023-45235.md): Buffer Overflow in EDK II Network Package (CVSS 8.3)
- [CVE-2023-45237](https://cve.now/CVE-2023-45237.md): Use of a Weak PseudoRandom Number Generator in EDK II Network Package (CVSS 5.3)
- [CVE-2023-45236](https://cve.now/CVE-2023-45236.md): Predictable TCP ISNs in EDK II Network Package (CVSS 5.8)
- [CVE-2023-45231](https://cve.now/CVE-2023-45231.md): Out-of-Bounds Read in EDK II Network Package (CVSS 6.5)
- [CVE-2023-45230](https://cve.now/CVE-2023-45230.md): Buffer Overflow in EDK II Network Package (CVSS 8.3)
- [CVE-2023-45229](https://cve.now/CVE-2023-45229.md): Out-of-Bounds Read in EDK II Network Package (CVSS 6.5)
- [CVE-2022-36765](https://cve.now/CVE-2022-36765.md): Integer Overflow in CreateHob (CVSS 7.0)
- [CVE-2022-36764](https://cve.now/CVE-2022-36764.md): Heap Buffer Overflow in Tcg2MeasurePeImage (CVSS 7.0)
- [CVE-2022-36763](https://cve.now/CVE-2022-36763.md): Heap Buffer Overflow in Tcg2MeasureGptTable (CVSS 7.0)
- [CVE-2021-38578](https://cve.now/CVE-2021-38578.md): Existing CommBuffer checks in SmmEntryPoint will not catch underflow when computing BufferSize. (CVSS 7.4)
- [CVE-2021-38575](https://cve.now/CVE-2021-38575.md): NetworkPkg/IScsiDxe has remotely exploitable buffer overflows. (no CVSS)
- [CVE-2021-28216](https://cve.now/CVE-2021-28216.md): BootPerformanceTable pointer is read from an NVRAM variable in PEI. (no CVSS)
- [CVE-2021-28213](https://cve.now/CVE-2021-28213.md): Example EDK2 encrypted private key in the IpSecDxe.efi present potential security risks. (no CVSS)
- [CVE-2021-28211](https://cve.now/CVE-2021-28211.md): A heap overflow in LzmaUefiDecompressGetInfo function in EDK II. (no CVSS)
- [CVE-2021-28210](https://cve.now/CVE-2021-28210.md): An unlimited recursion in DxeCore in EDK II. (no CVSS)
- [CVE-2014-8271](https://cve.now/CVE-2014-8271.md): Buffer overflow in the Reclaim function in Tianocore EDK2 before SVN 16280 allows physically proximate attackers to gain privileges via a lo (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/tianocore
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.