NetworkPkg vulnerabilities

CVEs whose affected-version data names the NetworkPkg package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-97631Critical· 9.5

yesterday

Pre-boot RCE in EDK II PXE driver

EDK2 contains a vulnerability in BIOS where a user may cause “Out-of-bounds Write”, Classic Buffer Overflow, and “Incorrect Calculation of Buffer Size” by remote access. Successful exploitation of this vulnerability can lead to arbitrary…

▾ MidnightTianoCore · NetworkPkgvia CVEORG