Critical EDK II flaw reaches servers before Secure Boot during PXE boot
A critical buffer overflow in EDK II can enable code execution before Secure Boot, but only when a machine is booting from the network. Stable firmware fixes are not yet broadly available.