From Ars Technica

Code-execution flaw in UEFI firmware threatens most servers on planet Earth

Critical flaw in EDK2 allows attackers to execute code early in the boot process.

Read the full report at Ars Technica ↗