CVE-2026-97631
EDK2 contains a vulnerability in BIOS where a user may cause “Out-of-bounds Write”, Classic Buffer Overflow, and “Incorrect Calculation of Buffer Size” by remote access. Successful exploitation of this vulnerability can lead to arbitrary code execution. It could also impact Confidentiality, Integrity, and Availability.
Am I affected?
Sign in and add the software you use to your watchlist: we check it against every new vulnerability.
Show me how to fix itTimeline
- Published by NVD
- First covered by RedTeamDaily
- Last updated by NVD
Coverage
Critical GitLab flaw CVE-2026-97229 allows code execution and is now on CISA's exploited list
GitLab has fixed CVE-2026-97229, an integer overflow in its CI/CD regular-expression handling that carries a CVSS score of 10.0. A Rapid7 proof of concept showed that an attacker who can commit a malicious CI configuration and a crafted path to a public project can run OS commands as the git user on self-managed instances. CISA added the flaw to its Known Exploited Vulnerabilities catalogue on 29 October 2026, so self-managed administrators should upgrade without waiting for the normal patch cycle.
Sources: NVD and CISA known exploited vulnerabilities catalogue.