HP Sure Start IFD Protection - BIOS Security Update

A potential security vulnerability has been identified in HP Sure Start’s protection of the Intel Flash Descriptor in certain HP PC products, which might allow security bypass, arbitrary code execution, loss of integrity or confidentiality, or denial of service. HP is releasing BIOS updates to...

EUVD-2023-29448

Malicious code in bioql PyPI...

EUVD-2022-40703

Malicious code in bioql PyPI...

CVE-2024-36354

Improper input validation for DIMM serial presence detect SPD metadata could allow an attacker with physical access, ring0 access on a system with a non-compliant DIMM, or control over the Root of Trust for BIOS update, to bypass SMM isolation potentially resulting in arbitrary code execution at...

CVE-2024-36354

Improper input validation for DIMM serial presence detect SPD metadata could allow an attacker with physical access, ring0 access on a system with a non-compliant DIMM, or control over the Root of Trust for BIOS update, to bypass SMM isolation potentially resulting in arbitrary code execution at...

CVE-2024-36354

Improper input validation for DIMM serial presence detect SPD metadata could allow an attacker with physical access, ring0 access on a system with a non-compliant DIMM, or control over the Root of Trust for BIOS update, to bypass SMM isolation potentially resulting in arbitrary code execution at...

CVE-2024-36354

Improper input validation for DIMM serial presence detect SPD metadata could allow an attacker with physical access, ring0 access on a system with a non-compliant DIMM, or control over the Root of Trust for BIOS update, to bypass SMM isolation potentially resulting in arbitrary code execution at...

HPESBHF04934 rev.1 - Certain HPE ProLiant DL/ML/XD Servers Using Certain Intel Processor BIOS, INTEL-SA-01310, Intel OOBM Services Module Advisory, Local Escalation of Privilege

Potential Security Impact: Local: Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant Compute DL320 Gen12 -Prior to 1.4005-22-2025 HPE ProLiant Compute DL340 Gen12 -Prior to 1.4005-22-2025 HPE ProLiant Compute DL360 Gen12 -Prior to 1.4005-22-2025 H...

HPESBHF04932 rev.1 - Certain HPE SimpliVity Servers Using Certain Intel Processors, INTEL-SA-01192, UPLR3 - Intel TDX Module Software Advisory, Local Disclosure of Information Vulnerability

Potential Security Impact: Local: Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE SimpliVity 380 Gen11 - Prior to HPE SimpliVity Support Pack SVTSP 20250630 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2024-33607 |...

HPESBHF04926 rev.1 - Certain HPE StoreEasy Servers Using Certain Intel Processors, INTEL-SA-01313, 2025.3 IPU, Intel Xeon Processor Firmware Advisory, Multiple Vulnerabilities

Potential Security Impact: Local: Denial of Service DoS, Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE StoreEasy 1470 Performance - Prior to 2.6008-07-2025 U63 ROM Family HPE StoreEasy 1470 Storage - Prior to 2.6008-07-2025 U63 ROM Family HPE StoreEas...

HPESBHF04928 rev.1 - Certain HPE StoreEasy Servers Using Certain Intel Processors, INTEL-SA-01280, 2025.3 IPU, Intel Chipset Firmware Advisory, Multiple Vulnerabilities

Potential Security Impact: Local: Disclosure of Information, Escalation of Privilege; Remote: Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE StoreEasy 1470 Performance - Prior to 2.6008-07-2025 U63 ROM Family HPE StoreEasy 1470 Storage - Prior to...

HPESBHF04914 rev.1 - Certain HPE ProLiant DL/ML, Synergy, Alletra, and Edgeline Servers Using Certain Intel Processors, INTEL-SA-01249, 2025.2 IPU, Intel Processor Stream Cache Advisory, Local Escalation of Privilege Vulnerability

Potential Security Impact: Local: Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Alletra 4110 - Prior to 2.5004-22-2025 HPE Alletra 4120 - Prior to 2.5004-22-2025 HPE Alletra 4140 - Prior to 2.5004-22-2025 HPE ProLiant DL20 Gen11 - Prior to...

AMD Server Vulnerabilities – August 2025

Summary Potential vulnerabilities in AMD EPYC™ Processor platforms that affect IOMMU, AMD Secure Encrypted Virtualization – Secure Nested Paging SEV-SNP and other platform components, were found during audits performed internally and by third parties. Mitigations have been provided in AMD EPYC™...

HPESBHF04912 rev.1 - Certain HPE ProLiant DL/ML, Synergy, Alletra, and Edgeline Servers Using Certain Intel Processors, INTEL-SA-01192, UPLR3 - Intel TDX Module Software Advisory, Local Disclosure of Information Vulnerability

Potential Security Impact: Local: Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Alletra 4110 - Prior to 2.4011-08-2024 HPE Alletra 4120 - Prior to 2.4011-08-2024 HPE Alletra 4140 - Prior to 2.4011-08-2024 HPE ProLiant DL110 Gen11 - Prior to...

HPESBHF04865 rev.1 - Certain HPE SimpliVity Servers Using Certain Intel Processor BIOS, INTEL-SA-01247, 2025.2 IPU - Intel Processor Indirect Branch Predictor Advisory, Local Disclosure of Information Vulnerability

Potential Security Impact: Local: Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE SimpliVity 380 Gen10 - Prior to HPE SimpliVity Support Pack Gen10 SVTSPGen10 v2025-0630 HPE SimpliVity 380 Gen10 G - Prior to HPE SimpliVity Support Pack Gen10 SVTSPGen1...

HPESBHF04798 rev.1 - Certain HPE SimpliVity Servers using AMD 3rd Generation and 4th Generation EPYC Processors, AMD-SB-3015, Undermining Integrity Features of SEV-SNP with Memory Aliasing (BadRAM)

Potential Security Impact: Local: Compromise of System Integrity SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE SimpliVity 325 Gen10 Plus - Prior to HPE SimpliVity Gen10 Support Pack SVTSPGen10 v2025-0630 HPE SimpliVity 325 Gen11 - Prior to HPE SimpliVity Gen11 Support Pack...

HPESBHF04829 rev.1 - Certain HPE SimpliVity Servers Using Certain AMD EPYC Processors, AMD-SB-7033: AMD CPU Microcode Signature Verification, Local Disclosure of Information

Potential Security Impact: Local: Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE SimpliVity 325 Gen10 - Prior to HPE SimpliVity Gen10 Support Pack SVTSPGen10 v20250630 HPE SimpliVity 325 Gen10 Plus - Prior to HPE SimpliVity Gen10 Support Pack...

HPESBHF04816 rev.1 - Certain HPE SimpliVity Servers Using Certain Intel Processors, INTEL-SA-01153, Local Disclosure of Information Vulnerability

Potential Security Impact: Local: Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE SimpliVity 380 Gen10 Plus - Prior to HPE SimpliVity Support Pack Gen10 SVTSPGen10 v20250630 HPE SimpliVity 170r Gen10 Server - Prior to HPE SimpliVity Support Pack Gen10...

CVE-2021-3614

A vulnerability was reported on some Lenovo Notebook systems that could allow an attacker with physical access to elevate privileges under certain conditions during a BIOS update performed by Lenovo Vantage...

HPESBHF04858 rev.1 - Certain HPE ProLiant DL/ML, Alletra, Synergy, and Edgeline Servers Using Certain Intel Processors, INTEL-SA-01244, 2025.2 IPU, Intel Processor Advisory, Local Denial of Service Vulnerability

Potential Security Impact: Local: Denial of Service DoS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant DL110 Gen11 - Prior to v2.5004-22-2025 HPE ProLiant DL320 Gen11 Server - Prior to v2.5004-22-2025 HPE ProLiant DL360 Gen11 Server - Prior to v2.5004-22-2025 HPE...