Lucene search

K

Cpg Bios Security Vulnerabilities

cve
cve

CVE-2022-34403

Dell BIOS contains a Stack based buffer overflow vulnerability. A local authenticated attacker could potentially exploit this vulnerability by using an SMI to send larger than expected input to a parameter to gain arbitrary code execution in...

8.8CVSS

8.9AI Score

0.0004EPSS

2023-02-01 06:15 AM
15
cve
cve

CVE-2022-32482

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with admin privileges may potentially exploit this vulnerability in order to modify a UEFI...

5.6CVSS

5AI Score

0.0004EPSS

2023-02-01 06:15 AM
18
cve
cve

CVE-2022-34400

Dell BIOS contains a heap buffer overflow vulnerability. A local attacker with admin privileges could potentially exploit this vulnerability to perform an arbitrary write to SMRAM during...

7.1CVSS

7AI Score

0.0004EPSS

2023-02-01 05:15 AM
26
cve
cve

CVE-2022-34399

Dell Alienware m17 R5 BIOS version prior to 1.2.2 contain a buffer access vulnerability. A malicious user with admin privileges could potentially exploit this vulnerability by sending input larger than expected in order to leak certain sections of...

5.1CVSS

4AI Score

0.0004EPSS

2023-01-18 12:15 PM
20
cve
cve

CVE-2022-34401

Dell BIOS contains a stack based buffer overflow vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to send larger than expected input to a parameter in order to gain arbitrary code execution in...

7.5CVSS

7.9AI Score

0.0004EPSS

2023-01-18 06:15 AM
15
cve
cve

CVE-2022-34390

Dell BIOS contains a use of uninitialized variable vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in...

7.8CVSS

7.8AI Score

0.0004EPSS

2022-10-12 08:15 PM
22
5
cve
cve

CVE-2022-34391

Dell Client BIOS Versions prior to the remediated version contain an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in...

7.8CVSS

7.8AI Score

0.0004EPSS

2022-10-12 08:15 PM
32
5
cve
cve

CVE-2022-32489

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in...

8.2CVSS

7.8AI Score

0.0004EPSS

2022-10-12 08:15 PM
28
4
cve
cve

CVE-2022-32485

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in...

7.8CVSS

7.8AI Score

0.0004EPSS

2022-10-12 08:15 PM
25
4
cve
cve

CVE-2022-32484

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with admin privileges may potentially exploit this vulnerability in order to modify a UEFI...

5.6CVSS

4.5AI Score

0.0004EPSS

2022-10-12 08:15 PM
20
4
cve
cve

CVE-2022-32488

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in...

8.2CVSS

7.8AI Score

0.0004EPSS

2022-10-12 08:15 PM
21
4
cve
cve

CVE-2022-32487

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in...

7.8CVSS

7.8AI Score

0.0004EPSS

2022-10-12 08:15 PM
22
4
cve
cve

CVE-2022-32491

Dell Client BIOS contains a Buffer Overflow vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by manipulating an SMI to cause an arbitrary write during...

7.8CVSS

7.4AI Score

0.0004EPSS

2022-10-12 08:15 PM
20
4
cve
cve

CVE-2022-32493

Dell BIOS contains an Stack-Based Buffer Overflow vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in...

7.8CVSS

7.9AI Score

0.0004EPSS

2022-10-12 08:15 PM
24
4
cve
cve

CVE-2022-32483

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with admin privileges may potentially exploit this vulnerability in order to modify a UEFI...

5.6CVSS

4.5AI Score

0.0004EPSS

2022-10-12 08:15 PM
30
4
cve
cve

CVE-2022-32486

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in...

8.8CVSS

8.8AI Score

0.0004EPSS

2022-10-11 05:15 PM
26
3
cve
cve

CVE-2022-32492

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in...

8.8CVSS

8.7AI Score

0.0004EPSS

2022-10-11 05:15 PM
27
2
cve
cve

CVE-2022-31222

Dell BIOS versions contain a Missing Release of Resource after Effective Lifetime vulnerability. A local authenticated administrator user could potentially exploit this vulnerability by consuming excess memory in order to cause the application to...

4.4CVSS

4.5AI Score

0.0004EPSS

2022-09-12 07:15 PM
34
5
cve
cve

CVE-2022-31221

Dell BIOS versions contain an Information Exposure vulnerability. A local authenticated administrator user could potentially exploit this vulnerability in order access sensitive state information on the...

2.3CVSS

3.5AI Score

0.0004EPSS

2022-09-12 07:15 PM
31
3
cve
cve

CVE-2022-31224

Dell BIOS versions contain an Improper Protection Against Voltage and Clock Glitches vulnerability. An attacker with physical access to the system could potentially exploit this vulnerability by triggering a fault condition in order to change the behavior of the...

2.4CVSS

3.8AI Score

0.001EPSS

2022-09-12 07:15 PM
29
5
cve
cve

CVE-2022-31226

Dell BIOS versions contain a Stack-based Buffer Overflow vulnerability. A local authenticated malicious user could potentially exploit this vulnerability by sending excess data to a function in order to gain arbitrary code execution on the...

7.8CVSS

7.8AI Score

0.0004EPSS

2022-09-12 07:15 PM
31
6
cve
cve

CVE-2022-31223

Dell BIOS versions contain an Improper Neutralization of Null Byte vulnerability. A local authenticated administrator user could potentially exploit this vulnerability by sending unexpected null bytes in order to read memory on the...

2.3CVSS

3.6AI Score

0.0004EPSS

2022-09-12 07:15 PM
28
5
cve
cve

CVE-2022-31225

Dell BIOS versions contain an Unchecked Return Value vulnerability. A local authenticated administrator user could potentially exploit this vulnerability in order to change the state of the system or cause unexpected...

5.1CVSS

5AI Score

0.0004EPSS

2022-09-12 07:15 PM
27
5
cve
cve

CVE-2022-31220

Dell BIOS versions contain an Unchecked Return Value vulnerability. A local authenticated administrator user could potentially exploit this vulnerability in order to change the state of the system or cause unexpected...

5.1CVSS

5AI Score

0.0004EPSS

2022-09-12 07:15 PM
23
5
cve
cve

CVE-2022-26859

Dell BIOS contains a race condition vulnerability. A local attacker could exploit this vulnerability by sending malicious input via SMI in order to bypass security checks during...

7CVSS

6.6AI Score

0.0004EPSS

2022-09-06 09:15 PM
21
4
cve
cve

CVE-2022-26860

Dell BIOS versions contain a stack-based buffer overflow vulnerability. A local attacker could exploit this vulnerability by sending malicious input via SMI to bypass security checks resulting in arbitrary code execution in...

7.8CVSS

7.9AI Score

0.001EPSS

2022-09-06 09:15 PM
22
3
cve
cve

CVE-2022-26861

Dell BIOS versions contain an Insecure Automated Optimization vulnerability. A local authenticated malicious user could exploit this vulnerability by sending malicious input via SMI to obtain arbitrary code execution during...

7.9CVSS

7.6AI Score

0.0004EPSS

2022-09-06 09:15 PM
26
2
cve
cve

CVE-2022-26858

Dell BIOS versions contain an Improper Authentication vulnerability. A locally authenticated malicious user could potentially exploit this vulnerability by sending malicious input to an SMI in order to bypass security...

7.8CVSS

7.5AI Score

0.0004EPSS

2022-09-06 09:15 PM
43
3
cve
cve

CVE-2022-29083

Prior Dell BIOS versions contain an Improper Authentication vulnerability. An unauthenticated attacker with physical access to the system could potentially exploit this vulnerability by bypassing drive security mechanisms in order to gain access to the...

6.8CVSS

6.7AI Score

0.001EPSS

2022-08-09 09:15 PM
34
2
cve
cve

CVE-2022-26862

Prior Dell BIOS versions contain an Input Validation vulnerability. A locally authenticated malicious user could potentially exploit this vulnerability by sending malicious input to an SMI in order to bypass security controls in...

7.8CVSS

7.4AI Score

0.0004EPSS

2022-06-23 06:15 PM
52
3
cve
cve

CVE-2022-26863

Prior Dell BIOS versions contain an Input Validation vulnerability. A locally authenticated malicious user could potentially exploit this vulnerability by sending malicious input to an SMI in order to bypass security controls in...

7.8CVSS

7.4AI Score

0.0004EPSS

2022-06-23 06:15 PM
45
4
cve
cve

CVE-2022-26864

Prior Dell BIOS versions contain an Input Validation vulnerability. A locally authenticated malicious user could potentially exploit this vulnerability by sending malicious input to an SMI in order to bypass security controls in...

7.8CVSS

7.4AI Score

0.0004EPSS

2022-06-23 06:15 PM
49
6
cve
cve

CVE-2022-24418

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution during...

7.5CVSS

6.9AI Score

0.0004EPSS

2022-05-26 04:15 PM
34
2
cve
cve

CVE-2022-24417

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution during...

7.5CVSS

6.9AI Score

0.0004EPSS

2022-05-26 04:15 PM
33
2
cve
cve

CVE-2022-24421

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution during...

8.2CVSS

7.8AI Score

0.0004EPSS

2022-03-11 10:15 PM
74
cve
cve

CVE-2022-24420

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution during...

8.2CVSS

7.8AI Score

0.0004EPSS

2022-03-11 10:15 PM
73
cve
cve

CVE-2022-24419

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution during...

8.2CVSS

7.8AI Score

0.0004EPSS

2022-03-11 10:15 PM
74
cve
cve

CVE-2022-24416

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution during...

8.2CVSS

7.8AI Score

0.0004EPSS

2022-03-11 10:15 PM
69
cve
cve

CVE-2022-24415

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution during...

8.2CVSS

7.8AI Score

0.0004EPSS

2022-03-11 10:15 PM
60
cve
cve

CVE-2022-22566

Select Dell Client Commercial and Consumer platforms contain a pre-boot direct memory access (DMA) vulnerability. An authenticated attacker with physical access to the system may potentially exploit this vulnerability in order to execute arbitrary code on the...

7.2CVSS

7AI Score

0.0004EPSS

2022-02-09 08:15 PM
75
cve
cve

CVE-2022-22567

Select Dell Client Commercial and Consumer platforms are vulnerable to an insufficient verification of data authenticity vulnerability. An authenticated malicious user may exploit this vulnerability in order to install modified BIOS...

5.1CVSS

5AI Score

0.0004EPSS

2022-02-09 08:15 PM
72
cve
cve

CVE-2021-36343

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in...

7.5CVSS

6.8AI Score

0.0004EPSS

2022-01-24 08:15 PM
76
cve
cve

CVE-2021-36342

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in...

7.5CVSS

6.8AI Score

0.0004EPSS

2022-01-24 08:15 PM
35
cve
cve

CVE-2021-36323

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in...

7.5CVSS

6.8AI Score

0.0004EPSS

2021-11-12 11:15 PM
22
cve
cve

CVE-2021-36324

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in...

7.5CVSS

6.8AI Score

0.0004EPSS

2021-11-12 11:15 PM
21
cve
cve

CVE-2021-36325

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in...

7.5CVSS

6.9AI Score

0.0004EPSS

2021-11-12 11:15 PM
43
cve
cve

CVE-2021-36283

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in...

7.5CVSS

6.9AI Score

0.0004EPSS

2021-09-28 08:15 PM
23
cve
cve

CVE-2021-36284

Dell BIOS contains an Improper Restriction of Excessive Authentication Attempts vulnerability. A local authenticated malicious administrator could exploit this vulnerability to bypass excessive admin password attempt mitigations in order to carry out a brute force...

5.7CVSS

4.7AI Score

0.0004EPSS

2021-09-28 08:15 PM
18
cve
cve

CVE-2021-36285

Dell BIOS contains an Improper Restriction of Excessive Authentication Attempts vulnerability. A local authenticated malicious administrator could exploit this vulnerability to bypass excessive NVMe password attempt mitigations in order to carry out a brute force...

5.7CVSS

4.7AI Score

0.0004EPSS

2021-09-28 08:15 PM
20
cve
cve

CVE-2021-21522

Dell BIOS contains a Credentials Management issue. A local authenticated malicious user may potentially exploit this vulnerability to gain access to sensitive information on an NVMe storage by resetting the BIOS password on the system via the Manageability...

8.2CVSS

4.6AI Score

0.0004EPSS

2021-09-28 08:15 PM
15
Total number of security vulnerabilities110