Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-xb4u-976f-efdb
Summaryedk2: Insufficient input validation in MdeModulePkg may lead to privilege escalation
Aliases
0
alias CVE-2019-11098
Fixed_packages
0
url pkg:deb/debian/edk2@2020.11-2%2Bdeb11u1?distro=trixie
purl pkg:deb/debian/edk2@2020.11-2%2Bdeb11u1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/edk2@2020.11-2%252Bdeb11u1%3Fdistro=trixie
1
url pkg:deb/debian/edk2@2020.11-2%2Bdeb11u2?distro=trixie
purl pkg:deb/debian/edk2@2020.11-2%2Bdeb11u2?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-b7a9-w2fs-dbh7
1
vulnerability VCID-k7zd-s9nc-r3hb
2
vulnerability VCID-mg21-k76s-sqfp
3
vulnerability VCID-quq1-8rke-c3gf
4
vulnerability VCID-r48c-b4df-ffhx
5
vulnerability VCID-sd4b-3g4z-mubq
6
vulnerability VCID-z1gk-5f8t-tqau
7
vulnerability VCID-zd64-tjtu-sua3
8
vulnerability VCID-zwx2-8yhh-7yef
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/edk2@2020.11-2%252Bdeb11u2%3Fdistro=trixie
2
url pkg:deb/debian/edk2@2020.11-2%2Bdeb11u2
purl pkg:deb/debian/edk2@2020.11-2%2Bdeb11u2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2atx-ce9g-tbds
1
vulnerability VCID-2nzx-2ymt-kuhv
2
vulnerability VCID-5czu-f7hq-v3bf
3
vulnerability VCID-9j1j-68kv-ufhn
4
vulnerability VCID-b7a9-w2fs-dbh7
5
vulnerability VCID-fxxz-zj2j-1qdz
6
vulnerability VCID-h4uc-8m6s-ffhy
7
vulnerability VCID-ha36-4zhr-mfcu
8
vulnerability VCID-hme1-vqbr-qydz
9
vulnerability VCID-k7zd-s9nc-r3hb
10
vulnerability VCID-mg21-k76s-sqfp
11
vulnerability VCID-nqk5-vmve-d3cq
12
vulnerability VCID-pf73-medx-quet
13
vulnerability VCID-quq1-8rke-c3gf
14
vulnerability VCID-r48c-b4df-ffhx
15
vulnerability VCID-r575-k7j8-hbfy
16
vulnerability VCID-sd4b-3g4z-mubq
17
vulnerability VCID-u9mt-wbe7-yfb6
18
vulnerability VCID-v17c-bytr-6qe4
19
vulnerability VCID-vzd4-6nza-4bgx
20
vulnerability VCID-w7z8-86tz-87eb
21
vulnerability VCID-x5x7-rwjh-wbb7
22
vulnerability VCID-z1gk-5f8t-tqau
23
vulnerability VCID-zd64-tjtu-sua3
24
vulnerability VCID-zwx2-8yhh-7yef
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/edk2@2020.11-2%252Bdeb11u2
3
url pkg:deb/debian/edk2@2020.11-5?distro=trixie
purl pkg:deb/debian/edk2@2020.11-5?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/edk2@2020.11-5%3Fdistro=trixie
4
url pkg:deb/debian/edk2@2022.11-6%2Bdeb12u2?distro=trixie
purl pkg:deb/debian/edk2@2022.11-6%2Bdeb12u2?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-b7a9-w2fs-dbh7
1
vulnerability VCID-k7zd-s9nc-r3hb
2
vulnerability VCID-mg21-k76s-sqfp
3
vulnerability VCID-quq1-8rke-c3gf
4
vulnerability VCID-r48c-b4df-ffhx
5
vulnerability VCID-sd4b-3g4z-mubq
6
vulnerability VCID-z1gk-5f8t-tqau
7
vulnerability VCID-zd64-tjtu-sua3
8
vulnerability VCID-zwx2-8yhh-7yef
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/edk2@2022.11-6%252Bdeb12u2%3Fdistro=trixie
5
url pkg:deb/debian/edk2@2025.02-8%2Bdeb13u1?distro=trixie
purl pkg:deb/debian/edk2@2025.02-8%2Bdeb13u1?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-zd64-tjtu-sua3
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/edk2@2025.02-8%252Bdeb13u1%3Fdistro=trixie
6
url pkg:deb/debian/edk2@2025.02-9?distro=trixie
purl pkg:deb/debian/edk2@2025.02-9?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-zd64-tjtu-sua3
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/edk2@2025.02-9%3Fdistro=trixie
7
url pkg:deb/debian/edk2@2025.11-4?distro=trixie
purl pkg:deb/debian/edk2@2025.11-4?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/edk2@2025.11-4%3Fdistro=trixie
8
url pkg:deb/debian/edk2@2025.11-5?distro=trixie
purl pkg:deb/debian/edk2@2025.11-5?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/edk2@2025.11-5%3Fdistro=trixie
Affected_packages
0
url pkg:deb/debian/edk2@0~20131112.2590861a-3
purl pkg:deb/debian/edk2@0~20131112.2590861a-3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-12pz-n6cq-3kg9
1
vulnerability VCID-2atx-ce9g-tbds
2
vulnerability VCID-2nzx-2ymt-kuhv
3
vulnerability VCID-5czu-f7hq-v3bf
4
vulnerability VCID-7snr-xbcq-n7bn
5
vulnerability VCID-8u8r-kpy1-sua4
6
vulnerability VCID-9j1j-68kv-ufhn
7
vulnerability VCID-b7a9-w2fs-dbh7
8
vulnerability VCID-bev8-5pts-ryh5
9
vulnerability VCID-bfkk-ttfx-u3bb
10
vulnerability VCID-ckyc-4ewv-dyhx
11
vulnerability VCID-cqwr-6xc1-z7dy
12
vulnerability VCID-dst7-q1b4-63ft
13
vulnerability VCID-fjff-f33s-5yen
14
vulnerability VCID-fxxz-zj2j-1qdz
15
vulnerability VCID-h4uc-8m6s-ffhy
16
vulnerability VCID-ha36-4zhr-mfcu
17
vulnerability VCID-hme1-vqbr-qydz
18
vulnerability VCID-jru9-qcjy-93d1
19
vulnerability VCID-k7n3-f3ej-tqa9
20
vulnerability VCID-k7zd-s9nc-r3hb
21
vulnerability VCID-mfbp-ej43-hbh5
22
vulnerability VCID-mg21-k76s-sqfp
23
vulnerability VCID-mgbq-zh3v-uudp
24
vulnerability VCID-nqk5-vmve-d3cq
25
vulnerability VCID-pf73-medx-quet
26
vulnerability VCID-q448-gmmp-pkaa
27
vulnerability VCID-q4pf-fuwv-d3e3
28
vulnerability VCID-qbgw-q6yb-g7d3
29
vulnerability VCID-quq1-8rke-c3gf
30
vulnerability VCID-r48c-b4df-ffhx
31
vulnerability VCID-r575-k7j8-hbfy
32
vulnerability VCID-s1qw-sn4h-xyfe
33
vulnerability VCID-s69t-vde7-1fem
34
vulnerability VCID-sd4b-3g4z-mubq
35
vulnerability VCID-u9mt-wbe7-yfb6
36
vulnerability VCID-v17c-bytr-6qe4
37
vulnerability VCID-vzd4-6nza-4bgx
38
vulnerability VCID-w1dc-2k92-u7ha
39
vulnerability VCID-w7z8-86tz-87eb
40
vulnerability VCID-x5x7-rwjh-wbb7
41
vulnerability VCID-xb4u-976f-efdb
42
vulnerability VCID-xbzy-jfjd-j3ew
43
vulnerability VCID-yyqe-rr6t-c3hd
44
vulnerability VCID-z1gk-5f8t-tqau
45
vulnerability VCID-zd64-tjtu-sua3
46
vulnerability VCID-zwx2-8yhh-7yef
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/edk2@0~20131112.2590861a-3
1
url pkg:deb/debian/edk2@0~20161202.7bbe0b3e-1%2Bdeb9u1
purl pkg:deb/debian/edk2@0~20161202.7bbe0b3e-1%2Bdeb9u1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-12pz-n6cq-3kg9
1
vulnerability VCID-2atx-ce9g-tbds
2
vulnerability VCID-2nzx-2ymt-kuhv
3
vulnerability VCID-5czu-f7hq-v3bf
4
vulnerability VCID-7snr-xbcq-n7bn
5
vulnerability VCID-8u8r-kpy1-sua4
6
vulnerability VCID-9j1j-68kv-ufhn
7
vulnerability VCID-b7a9-w2fs-dbh7
8
vulnerability VCID-bev8-5pts-ryh5
9
vulnerability VCID-bfkk-ttfx-u3bb
10
vulnerability VCID-ckyc-4ewv-dyhx
11
vulnerability VCID-cqwr-6xc1-z7dy
12
vulnerability VCID-dst7-q1b4-63ft
13
vulnerability VCID-fjff-f33s-5yen
14
vulnerability VCID-fxxz-zj2j-1qdz
15
vulnerability VCID-h4uc-8m6s-ffhy
16
vulnerability VCID-ha36-4zhr-mfcu
17
vulnerability VCID-hme1-vqbr-qydz
18
vulnerability VCID-jru9-qcjy-93d1
19
vulnerability VCID-k7n3-f3ej-tqa9
20
vulnerability VCID-k7zd-s9nc-r3hb
21
vulnerability VCID-mfbp-ej43-hbh5
22
vulnerability VCID-mg21-k76s-sqfp
23
vulnerability VCID-mgbq-zh3v-uudp
24
vulnerability VCID-nqk5-vmve-d3cq
25
vulnerability VCID-pf73-medx-quet
26
vulnerability VCID-q448-gmmp-pkaa
27
vulnerability VCID-q4pf-fuwv-d3e3
28
vulnerability VCID-qbgw-q6yb-g7d3
29
vulnerability VCID-quq1-8rke-c3gf
30
vulnerability VCID-r48c-b4df-ffhx
31
vulnerability VCID-r575-k7j8-hbfy
32
vulnerability VCID-s1qw-sn4h-xyfe
33
vulnerability VCID-s69t-vde7-1fem
34
vulnerability VCID-sd4b-3g4z-mubq
35
vulnerability VCID-u9mt-wbe7-yfb6
36
vulnerability VCID-v17c-bytr-6qe4
37
vulnerability VCID-vzd4-6nza-4bgx
38
vulnerability VCID-w1dc-2k92-u7ha
39
vulnerability VCID-w7z8-86tz-87eb
40
vulnerability VCID-x5x7-rwjh-wbb7
41
vulnerability VCID-xb4u-976f-efdb
42
vulnerability VCID-xbzy-jfjd-j3ew
43
vulnerability VCID-yyqe-rr6t-c3hd
44
vulnerability VCID-z1gk-5f8t-tqau
45
vulnerability VCID-zd64-tjtu-sua3
46
vulnerability VCID-zwx2-8yhh-7yef
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/edk2@0~20161202.7bbe0b3e-1%252Bdeb9u1
2
url pkg:deb/debian/edk2@0~20181115.85588389-3%2Bdeb10u3
purl pkg:deb/debian/edk2@0~20181115.85588389-3%2Bdeb10u3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-12pz-n6cq-3kg9
1
vulnerability VCID-2atx-ce9g-tbds
2
vulnerability VCID-2nzx-2ymt-kuhv
3
vulnerability VCID-5czu-f7hq-v3bf
4
vulnerability VCID-7snr-xbcq-n7bn
5
vulnerability VCID-8u8r-kpy1-sua4
6
vulnerability VCID-9j1j-68kv-ufhn
7
vulnerability VCID-b7a9-w2fs-dbh7
8
vulnerability VCID-bev8-5pts-ryh5
9
vulnerability VCID-bfkk-ttfx-u3bb
10
vulnerability VCID-ckyc-4ewv-dyhx
11
vulnerability VCID-fjff-f33s-5yen
12
vulnerability VCID-fxxz-zj2j-1qdz
13
vulnerability VCID-h4uc-8m6s-ffhy
14
vulnerability VCID-ha36-4zhr-mfcu
15
vulnerability VCID-hme1-vqbr-qydz
16
vulnerability VCID-jru9-qcjy-93d1
17
vulnerability VCID-k7n3-f3ej-tqa9
18
vulnerability VCID-k7zd-s9nc-r3hb
19
vulnerability VCID-mfbp-ej43-hbh5
20
vulnerability VCID-mg21-k76s-sqfp
21
vulnerability VCID-mgbq-zh3v-uudp
22
vulnerability VCID-nqk5-vmve-d3cq
23
vulnerability VCID-pf73-medx-quet
24
vulnerability VCID-qbgw-q6yb-g7d3
25
vulnerability VCID-quq1-8rke-c3gf
26
vulnerability VCID-r48c-b4df-ffhx
27
vulnerability VCID-r575-k7j8-hbfy
28
vulnerability VCID-sd4b-3g4z-mubq
29
vulnerability VCID-u9mt-wbe7-yfb6
30
vulnerability VCID-v17c-bytr-6qe4
31
vulnerability VCID-vzd4-6nza-4bgx
32
vulnerability VCID-w1dc-2k92-u7ha
33
vulnerability VCID-w7z8-86tz-87eb
34
vulnerability VCID-x5x7-rwjh-wbb7
35
vulnerability VCID-xb4u-976f-efdb
36
vulnerability VCID-xbzy-jfjd-j3ew
37
vulnerability VCID-yyqe-rr6t-c3hd
38
vulnerability VCID-z1gk-5f8t-tqau
39
vulnerability VCID-zd64-tjtu-sua3
40
vulnerability VCID-zwx2-8yhh-7yef
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/edk2@0~20181115.85588389-3%252Bdeb10u3
References
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11098.json
reference_id
reference_type
scores
0
value 6.4
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11098.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2019-11098
reference_id
reference_type
scores
0
value 0.00054
scoring_system epss
scoring_elements 0.16976
published_at 2026-04-01T12:55:00Z
1
value 0.00054
scoring_system epss
scoring_elements 0.17141
published_at 2026-04-02T12:55:00Z
2
value 0.00054
scoring_system epss
scoring_elements 0.17194
published_at 2026-04-04T12:55:00Z
3
value 0.00054
scoring_system epss
scoring_elements 0.16972
published_at 2026-04-07T12:55:00Z
4
value 0.00054
scoring_system epss
scoring_elements 0.17062
published_at 2026-04-08T12:55:00Z
5
value 0.00054
scoring_system epss
scoring_elements 0.17118
published_at 2026-04-09T12:55:00Z
6
value 0.00054
scoring_system epss
scoring_elements 0.17094
published_at 2026-04-11T12:55:00Z
7
value 0.00054
scoring_system epss
scoring_elements 0.17047
published_at 2026-04-12T12:55:00Z
8
value 0.00054
scoring_system epss
scoring_elements 0.16986
published_at 2026-04-13T12:55:00Z
9
value 0.00054
scoring_system epss
scoring_elements 0.16922
published_at 2026-04-16T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2019-11098
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11098
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11098
3
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 6.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
4
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2007434
reference_id 2007434
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2007434
5
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=991495
reference_id 991495
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=991495
6
reference_url https://usn.ubuntu.com/5088-1/
reference_id USN-5088-1
reference_type
scores
url https://usn.ubuntu.com/5088-1/
Weaknesses
0
cwe_id 20
name Improper Input Validation
description The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.
Exploits
Severity_range_score6.4 - 6.4
Exploitability0.5
Weighted_severity5.8
Risk_score2.9
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-xb4u-976f-efdb