Logic issue in variable service module for EDK II/UDK2018/UDK2017/UDK2015 may allow an authenticated user to potentially enable escalation of privilege, information disclosure and/or denial of service via local access.
{
"unresolved_ranges": [
{
"cpes": [
"cpe:2.3:a:tianocore:edk_ii:udk2015:*:*:*:*:*:*:*"
],
"source": "CPE_FIELD",
"vendor_product": "tianocore:edk_ii",
"extracted_events": [
{
"last_affected": "udk2015"
}
]
}
]
}