EDK II PXE flaw enables pre-boot remote code execution
CVE-2026-97631 lets an unauthenticated attacker corrupt memory and run code during network boot, before Secure Boot or the OS load.
By tarpit#uefi
Canonical-signed GRUB 2.14 bypasses Secure Boot lockdown via serial MMIO
A local attacker who controls boot configuration can clear GRUB's file-verifier list and load unsigned modules while lockdown still reports enabled.
By tarpit