5653 matches found
Multi-Vendor BIOS Security Vulnerabilities (June 2025) - Lenovo Support US
No description provided...
CVE-2025-33043
APTIOV contains a vulnerability in BIOS where an attacker may cause an Improper Input Validation locally. Successful exploitation of this vulnerability can potentially impact of integrity...
CVE-2025-33043
APTIOV contains a vulnerability in BIOS where an attacker may cause an Improper Input Validation locally. Successful exploitation of this vulnerability can potentially impact of integrity...
CVE-2025-33043
CVE-2025-33043 is an SMM/AMI AptioV BIOS vulnerability involving improper input validation in BIOS code, enabling local attacker to redirect memory references into SMRAM and potentially execute code in the System Management Mode. The impact is elevation of privileges with the ability to modify fi...
CVE-2025-33043 SMM buffer Integrity
APTIOV contains a vulnerability in BIOS where an attacker may cause an Improper Input Validation locally. Successful exploitation of this vulnerability can potentially impact of integrity...
PT-2025-23166 · Aptiov · Aptiov
Name of the Vulnerable Software and Affected Versions: APTIOV affected versions not specified Description: The issue is related to an Improper Input Validation in the BIOS, which can be exploited locally by an attacker. This could potentially impact the integrity of the system. Recommendations: A...
CVE-2024-28970
Dell Client BIOS contains an Out-of-bounds Write vulnerability. A local authenticated malicious user with admin privileges could potentially exploit this vulnerability, leading to platform denial of service...
CVE-2024-4143
A potential security vulnerability has been identified in certain HP PC products using AMI BIOS, which might allow arbitrary code execution. AMI has released firmware updates to mitigate this vulnerability...
CVE-2024-22247
VMware SD-WAN Edge contains a missing authentication and protection mechanism vulnerability. A malicious actor with physical access to the SD-WAN Edge appliance during activation can potentially exploit this vulnerability to access the BIOS configuration. In addition, the malicious actor may be...
CVE-2023-25522
NVIDIA DGX A100/A800 contains a vulnerability in SBIOS where an attacker may cause improper input validation by providing configuration information in an unexpected format. A successful exploit of this vulnerability may lead to denial of service, information disclosure, and data tampering...
CVE-2023-28722
Improper buffer restrictions for some Intel NUC BIOS firmware before version IN0048 may allow a privileged user to potentially enable escalation of privilege via local access...
CVE-2023-31041
An issue was discovered in SysPasswordDxe in Insyde InsydeH2O with kernel 5.0 through 5.5. System password information could optionally be stored in cleartext, which might lead to possible information disclosure...
CVE-2023-22444
Improper initialization in some IntelR NUC 13 Extreme Compute Element, IntelR NUC 13 Extreme Kit, IntelR NUC 11 Performance Kit, IntelR NUC 11 Performance Mini PC, IntelR NUC Compute Element, IntelR NUC Laptop Kit, IntelR NUC Pro Kit, IntelR NUC Pro Board and IntelR NUC Pro Mini PC BIOS firmware...
CVE-2023-22312
Improper access control for some IntelR NUC BIOS firmware may allow a privileged user to potentially enable escalation of privilege via local access...
CVE-2023-22330
Use of uninitialized resource in some IntelR NUC BIOS firmware may allow a privileged user to potentially enable information disclosure via local access...
CVE-2023-26299
A potential Time-of-Check to Time-of-Use TOCTOU vulnerability has been identified in certain HP PC products using AMI UEFI Firmware system BIOS, which might allow arbitrary code execution. AMI has released updates to mitigate the potential vulnerability...
CVE-2023-29495
Improper input validation for some Intel NUC BIOS firmware before version IN0048 may allow a privileged user to potentially enable escalation of privilege via local access...
CVE-2023-6138
A potential security vulnerability has been identified in the system BIOS for certain HP Workstation PCs, which might allow escalation of privilege, arbitrary code execution, or denial of service. HP is releasing mitigation for the potential vulnerability...