A critical code-execution flaw in EDK2 UEFI firmware can let attackers run code early in the boot process, before the operating system loads. The vulnerability threatens most servers worldwide and raises concerns because such low-level compromise can be difficult to detect and remediate.