VulnerabilityPublished
GCP-2024-001
Source GCP Compute Engine Security
0
Mentioned vulnerabilities
Severity
MediumRated Medium by Threat Radar's AI analysis
Data as of 26 Oct 2026, 22:14 UTC
What to do
AI-suggested
No action is required from customers. Google has patched the vulnerabilities across Compute Engine, and all virtual machines are protected from these issues.
Description
Several vulnerabilities were discovered in the TianoCore EDK II UEFI firmware used in Google Compute Engine VMs. These vulnerabilities could allow an attacker to bypass secure boot, resulting in false measurements during the secure boot process, including when used in Shielded VMs. Google has patched these vulnerabilities across Compute Engine, and all VMs are now protected. No customer action is required.
References
Community reviews
Loading reviews…