"PixieFail Vulnerabilities Expose UEFI PXE Boot Flaws in Enterprise Systems"
A set of nine vulnerabilities, known as PixieFail, have been discovered in the PXE network boot process, affecting Tianocore's EDK II, a widely used UEFI implementation in enterprise systems. These flaws, which were disclosed to impacted vendors, can lead to denial of service, information disclosure, remote code execution, DNS cache poisoning, and network session hijacking. The vulnerabilities impact various major tech companies and BIOS providers, and while patches for the first seven flaws are available, the disclosure date has been postponed due to complexities in fixing the issues faced by multiple vendors.