Code-execution flaw in UEFI firmware affects most servers on planet Earth: https://arstechnica.com/security/2026/10/code-execution-flaw-in-uefi-firmware-threatens-most-servers-on-planet-earth/

This is an interesting bug for a few reasons:
- In part of the code that was heavily fuzzed (but ICMP was skipped)
- In the reference SDK used by huge amounts of downstream firmware
- Exploitable before the PCH check (can attack BitLocker keys in TPM)
- A forever-vulnerability in out-of-support hardware

Great work by Alex Matrosov (Anthropic) and Dan Holmes-Mitra (Google)!