HCE2-SA-2023-0076 Critical HCE 2.0 Security Fix(es): An unlimited recursion in DxeCore in EDK II. (CVE-2021-28210) Insufficient input validation in MdeModulePkg in EDKII may allow an unauthenticated user to potentially enable escalation of privilege, denial of service and/or information disclosure via physical access. (CVE-2019-11098) NetworkPkg/IScsiDxe has remotely exploitable buffer overflows. (CVE-2021-38575) BootPerformanceTable pointer is read from an NVRAM variable in PEI. Recommend setting PcdFirmwarePerformanceDataTableS3Support to FALSE. (CVE-2021-28216) Existing CommBuffer checks in SmmEntryPoint will not catch underflow when computing BufferSize. (CVE-2021-38578) HCE 2.0 edk2-devel-202011-7.hce2.aarch64.rpm edk2-help-202011-7.hce2.noarch.rpm python3-edk2-devel-202011-7.hce2.noarch.rpm edk2-devel-202011-7.hce2.x86_64.rpm edk2-ovmf-202011-7.hce2.noarch.rpm