1,735 words
UEFI Flaw CVE-2026-97631 Rated 9.5/10 [2026]
A memory-corruption bug in TianoCore EDK II, the open-source codebase that underpins much of the UEFI firmware industry, became public on October 27, 2026. Ars Technica reported that the flaw, tracked as CVE-2026-97631, sits in an ICMP component and may allow code…