CVE-2024-5477

CVE-2024-5477 concerns HP System BIOS on some HP PC products. The vulnerability may allow privilege escalation, arbitrary code execution, denial of service, or information disclosure via a physical attack. Key details from connected documents: affected component is the System BIOS; mitigation is ...

HP PC 安全漏洞

HP PC is a computer product from Hewlett-Packard HP in the United States. HP PC has a security vulnerability that stems from a potential issue with System BIOS that could lead to elevated privileges or information disclosure...

CVE-2024-38805 iSCSI Remote Memory Corruption and Denial of Service

EDK2 contains a vulnerability in BIOS where a user may cause an Integer Overflow or Wraparound by network means. A successful exploitation of this vulnerability may lead to denial of service...

CVE-2024-38805

CVE-2024-38805 is an EDK2 BIOS vulnerability where a user may cause an Integer Overflow or Wraparound via network, potentially causing a denial of service. Connected advisories confirm affected EDK2 implementations across Linux distributions (Oracle Linux ELSA advisories for OL8/OL9, Ubuntu USN-7...

CVE-2024-38805

EDK2 contains a vulnerability in BIOS where a user may cause an Integer Overflow or Wraparound by network means. A successful exploitation of this vulnerability may lead to denial of service...

CVE-2025-22830 SmiFlash Race Condition Vulnerability

APTIOV contains a vulnerability in BIOS where a skilled user may cause “Race Condition” by local access. A successful exploitation of this vulnerability may lead to resource exhaustion and impact Confidentiality, Integrity, and Availability...

PT-2025-32670

Name of the Vulnerable Software and Affected Versions: EDK2 affected versions not specified Description: EDK2 BIOS contains a vulnerability where a user may cause an Integer Overflow or Wraparound via network means. Successful exploitation of this issue may lead to a denial of service...

CVE-2025-3770 SMM IDT Privilege Escalation Vulnerability

EDK2 contains a vulnerability in BIOS where an attacker may cause “Protection Mechanism Failure” by local access. Successful exploitation of this vulnerability will lead to arbitrary code execution and impact Confidentiality, Integrity, and Availability...

CVE-2025-3770

CVE-2025-3770 refers to a vulnerability in EDK2 BIOS where a local attacker can trigger a Protection Mechanism Failure , enabling arbitrary code execution and impacting Confidentiality, Integrity, and Availability . Connected Nessus advisories for EulerOS, Oracle Linux, and Ubuntu translate this ...

TianoCore EDK II BIOS Vulnerability - Lenovo Support US

No description provided...

PT-2025-32242

Name of the Vulnerable Software and Affected Versions EDK2 affected versions not specified Description EDK2 contains a vulnerability in BIOS that may allow an attacker to cause a “Protection Mechanism Failure” with local access. Successful exploitation of this issue could lead to arbitrary code...

DELL Client Platform BIOS Weak Authentication Vulnerability

The DELL Client Platform BIOS is a BIOS system developed by Dell for its client devices e.g., laptops, desktops, etc.. The DELL Client Platform BIOS has a weak authentication vulnerability that can be exploited by an attacker to elevate privileges...

HPESBHF04812 rev.1 - Certain HPE SimpliVity Servers Using Certain Intel Processor BIOS, INTEL-SA-01213, 2025.1 IPU - Intel SGX Advisory, Denial of Service Vulnerability

Potential Security Impact: Local: Denial of Service DoS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE SimpliVity 380 Gen11 - Prior to HPE SimpliVity Support Pack Gen11 SVTSPGen11 v20250630 HPE SimpliVity 380 Gen10 Plus - Prior to HPE SimpliVity Support Pack Gen10 SVTSPGen10...

CVE-2025-36600

Dell Client Platform BIOS contains an Improper Access Control Applied to Mirrored or Aliased Memory Regions vulnerability in an externally developed component. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Code execution...

CVE-2025-36600

Dell Client Platform BIOS contains an Improper Access Control Applied to Mirrored or Aliased Memory Regions vulnerability in an externally developed component. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Code execution...

CVE-2025-36600

CVE-2025-36600 involves Dell Client Platform BIOS with an Improper Access Control on Mirrored or Aliased Memory Regions in an externally developed component. A high-privilege attacker with local access could potentially achieve code execution. The vulnerability is rooted in improper access contro...

CVE-2025-36600

Dell Client Platform BIOS contains an Improper Access Control Applied to Mirrored or Aliased Memory Regions vulnerability in an externally developed component. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Code execution...

Dell Client Platform BIOS 安全漏洞

Dell Client Platform BIOS is a client platform BIOS from Dell USA. The Dell Client Platform BIOS suffers from an Access Control Error vulnerability that stems from improper access control of mirrored or aliased memory regions in an externally developed component, which can be exploited by an...

K000152189: Intel BIOS vulnerability CVE-2022-21233

Security Advisory Description Improper isolation of shared resources in some IntelR Processors may allow a privileged user to potentially enable information disclosure via local access. CVE-2022-21233 Impact This vulnerability may allow a privileged user to potentially enable information disclosu...

Astra Linux – Vulnerability in edk2

EDK2 contains a vulnerability in the BIOS, where an attacker may cause “Improper Input Validation” through local access. Successful exploitation of this vulnerability could alter the control flow in unexpected ways, potentially allowing arbitrary command execution and affecting Confidentiality,...