CVE-2019-14586 is a use-after-free vulnerability in EDK II, affecting Debian and Tianocore EDK2 implementations. With a CVSS score of 8.0 (High), it allows an authenticated attacker on an adjacent network to potentially achieve escalation of privilege, information disclosure, or denial of service. While the vulnerability has a high risk score, there is currently no public exploit code available, it is not listed in CISA's KEV catalog, and it has received no significant community discussion or media coverage.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
Range not provided by sourceCPE matchmatch criteria | cpe:2.3:a:tianocore:edk2:-:*:*:*:*:*:*:* | ||
9.0CPE matchmatch criteria | cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.2 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.