Critical 16-year-old UEFI flaw can run code before Secure Boot on network-booting servers

A critical 16-year-old buffer-overflow flaw in EDK II’s PXE network-boot code may allow an attacker to run code before the operating system, Secure Boot, and other startup checks load. The flaw affects machines that boot from the network, primarily servers and data-center equipment; according to the source, home and office machines that boot only from a local disk are not affected.