
A 9.5-severity memory-corruption flaw, CVE-2026-97631, in TianoCore EDK II's PXE network-boot driver lets attackers on a local network run code before Secure Boot and TPM defenses load. A premature public patch ended the planned disclosure embargo, and vendors have yet to detail which products are affected.
— via Hacker News (top 30), DamnInteresting










