16-year-old EDK II UEFI flaw enables pre-boot code execution

A critical vulnerability in EDK II, the open-source UEFI firmware code used by most hardware manufacturers, allows attackers to execute code before the operating system loads during network boot. The flaw exists for 16 years. Affected organizations should audit UEFI firmware on network-booting servers and review boot security configurations.