Critical UEFI firmware flaw leaks early, leaving servers waiting for a fix
A critical flaw has been discovered in EDK II, the open-source code used by most firmware makers to build UEFI firmware that initializes servers. The vulnerability allows attackers to run code before the operating system loads, granting pre-boot execution capabilities. TianoCore, which maintains EDK II, rated the bug 9.5 out of 10 in severity.
Key points
- Critical UEFI firmware flaw in EDK II
- Enables pre-OS code execution
- Rated 9.5/10 severity by TianoCore
- Affects most server firmware implementations
Summary and key points written by AI from the headline and a short excerpt, so they can be incomplete or wrong. The Next Web did the reporting; read the original for the full story.
Read the full story at The Next Web
