Tianocore EDK II

Name: Tianocore EDK II
Brand: Tianocore

productEU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

by severity

1critical4high1medium0low

updated 2026-10-28

vulnerabilities (6)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2021-38575US	high8.1	1.99% (81st)	—	no fix	2021-12-01	≤ unspecified ≤edk2-stable202105
CVE-2021-28213US	high7.5	1.11% (66th)	—	no fix	2021-06-11	≤ edk2-stable201905
CVE-2021-38578US	critical9.8	1.02% (63rd)	—	no fix	2022-03-03	≤ edk2-stable202208
CVE-2021-28216US	high7.8	0.42% (36th)	—	no fix	2021-08-05	≤ EDK II Master
CVE-2021-28210US	high7.8	0.40% (34th)	—	no fix	2021-06-11	≤ unspecified ≤edk2-stable202008
CVE-2021-28211US	medium6.7	0.39% (32nd)	—	no fix	2021-06-11	≤ edk2-stable202008

The flaw types (CWEs) most of these CVEs share.

CWE-124Buffer Underwrite ('Buffer Underflow')2 CVEs
CWE-787Out-of-bounds Write2 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer1 CVEs
CWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')1 CVEs
CWE-122Heap-based Buffer Overflow1 CVEs
CWE-476NULL Pointer Dereference1 CVEs
CWE-587Assignment of a Fixed Address to a Pointer1 CVEs
CWE-674Uncontrolled Recursion1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.