Insyde InsydeH2O kernel 安全漏洞

Insyde InsydeH2O kernel is a program kernel for updating computer BIOS from Insyde, a Chinese company. A security vulnerability exists in Insyde InsydeH2O kernel versions prior to 5.7 05.70.50, which is caused by a buffer over-read...

CVE-2025-46750

SEL BIOS packages prior to 1.3.49152.117 or 2.6.49152.98 allow a local attacker to bypass password authentication and change password-protected BIOS settings by importing a BIOS settings file with no password set...

Multi-Vendor BIOS Security Vulnerabilities (May 2025 - Lenovo Support US

No description provided...

Absolute Persistence BIOS Module Vulnerability - Lenovo Support US

No description provided...

Absolute Persistence BIOS Module Vulnerability - Lenovo Support US

No description provided...

CVE-2024-42446

APTIOV contains a vulnerability in BIOS where an attacker may cause a Time-of-check Time-of-use TOCTOU Race Condition by local means. Successful exploitation of this vulnerability may lead to arbitrary code execution...

CVE-2024-42446

APTIOV contains a vulnerability in BIOS where an attacker may cause a Time-of-check Time-of-use TOCTOU Race Condition by local means. Successful exploitation of this vulnerability may lead to arbitrary code execution...

CVE-2024-42446 TOCTOU in SmmWhea

APTIOV contains a vulnerability in BIOS where an attacker may cause a Time-of-check Time-of-use TOCTOU Race Condition by local means. Successful exploitation of this vulnerability may lead to arbitrary code execution...

CVE-2024-42446 TOCTOU in SmmWhea

APTIOV contains a vulnerability in BIOS where an attacker may cause a Time-of-check Time-of-use TOCTOU Race Condition by local means. Successful exploitation of this vulnerability may lead to arbitrary code execution...

CVE-2024-42446

CVE-2024-42446 affects AMI AptioV BIOS with a TOCTOU race condition in BIOS code that can be triggered by a local attacker, potentially leading to arbitrary code execution. The description and connected sources consistently cite a local-exploit path and a high-impact outcomes (arbitrary code exec...

CVE-2024-42446: Time-of-check Time-of-use (TOCTOU) Race Condition

APTIOV contains a vulnerability in BIOS where an attacker may cause a Time-of-check Time-of-use TOCTOU Race Condition by local means. Successful exploitation of this vulnerability may lead to arbitrary code execution...

HPESBHF04858 rev.1 - Certain HPE ProLiant DL/ML, Alletra, Synergy, and Edgeline Servers Using Certain Intel Processors, INTEL-SA-01244, 2025.2 IPU, Intel Processor Advisory, Local Denial of Service Vulnerability

Potential Security Impact: Local: Denial of Service DoS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant DL110 Gen11 - Prior to v2.5004-22-2025 HPE ProLiant DL320 Gen11 Server - Prior to v2.5004-22-2025 HPE ProLiant DL360 Gen11 Server - Prior to v2.5004-22-2025 HPE...

PT-2025-20900 · Aptiov · Aptiov

Name of the Vulnerable Software and Affected Versions: APTIOV affected versions not specified Description: The issue is related to a Time-of-check Time-of-use TOCTOU Race Condition in the BIOS, which can be exploited by an attacker through local means. This could potentially lead to arbitrary cod...

CVE-2025-46750

SEL BIOS packages prior to 1.3.49152.117 or 2.6.49152.98 allow a local attacker to bypass password authentication and change password-protected BIOS settings by importing a BIOS settings file with no password set...

CVE-2025-46750

The CVE-2025-46750 issue affects SEL BIOS packages, specifically prior to 1.3.49152.117 and prior to 2.6.49152.98. The vulnerability allows a local attacker to bypass password authentication and modify password‑protected BIOS settings by importing a BIOS settings file that has no password. This i...

CVE-2025-46750 Authentication Bypass

SEL BIOS packages prior to 1.3.49152.117 or 2.6.49152.98 allow a local attacker to bypass password authentication and change password-protected BIOS settings by importing a BIOS settings file with no password set...

CVE-2025-46750 Authentication Bypass

SEL BIOS packages prior to 1.3.49152.117 or 2.6.49152.98 allow a local attacker to bypass password authentication and change password-protected BIOS settings by importing a BIOS settings file with no password set...

PT-2025-20722 · Sel Bios · Sel Bios

Name of the Vulnerable Software and Affected Versions: SEL BIOS packages versions prior to 1.3.49152.117 SEL BIOS packages versions prior to 2.6.49152.98 Description: A local attacker can bypass password authentication and change password-protected BIOS settings by importing a BIOS settings file...

CVE-2025-46750: Authentication Bypass by Primary Weakness

SEL BIOS packages prior to 1.3.49152.117 or 2.6.49152.98 allow a local attacker to bypass password authentication and change password-protected BIOS settings by importing a BIOS settings file with no password set...

HPESBHF04791 rev.1 - Certain HPE StoreEasy Servers Using Certain Intel Processors, INTEL-SA-01153, Local Disclosure of Information Vulnerability

Potential Security Impact: Local: Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Storage File Controller - Prior to 3.4001-16-25 U32 ROM Family HPE Storage Performance File Controller - Prior to 3.4001-16-25 U32 ROM Family HPE StoreEasy 1460 Storage ...