CVE-2024-36282

Improper input validation in the IntelR Server Board S2600ST Family BIOS and Firmware Update software all versions may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2024-36432

An arbitrary memory write vulnerability was discovered in Supermicro X11DPG-HGX2, X11PDG-QT, X11PDG-OT, and X11PDG-SN motherboards with BIOS firmware before 4.4...

CVE-2024-36434

An SMM callout vulnerability was discovered in Supermicro X11DPH-T, X11DPH-Tq, and X11DPH-i motherboards with BIOS firmware before 4.4...

CVE-2024-56161

Improper signature verification in AMD CPU ROM microcode patch loader may allow an attacker with local administrator privilege to load malicious CPU microcode resulting in loss of confidentiality and integrity of a confidential guest running under AMD SEV-SNP. Mitigation Mitigation requires to...

HPESBHF04779 rev.1 - Certain HPE ProLiant DX Servers Using Certain Intel Processors, INTEL-SA-01100, 2024.3 IPU - Intel Xeon Processor Advisory, Local Escalation of Privilege Vulnerability

Potential Security Impact: Local: Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant DX220n Gen10 Plus server - Prior to v2.2008-07-2024 HPE ProLiant DX380 Gen10 Plus server - Prior to v2.2008-07-2024 HPE ProLiant DX360 Gen10 Plus server - Prior t...

HPESBHF04781 rev.1 - Certain HPE ProLiant DX Servers Using Certain Intel Processors, INTEL-SA-01083, 2024.3 IPU - SMI Transfer Monitor Advisory, Local Escalation of Privilege Vulnerability

Potential Security Impact: Local: Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant DX170r Gen10 server - Prior to v3.3007-31-2024 HPE ProLiant DX190r Gen10 server - Prior to v3.3007-31-2024 HPE ProLiant DX220n Gen10 Plus server - Prior to...

HPESBHF04774 rev.1 - Certain HPE ProLiant Servers using AMD 3rd Generation and 4th Generation EPYC Processors, AMD-SB-3015, Undermining Integrity Features of SEV-SNP with Memory Aliasing (BadRAM)

Potential Security Impact: Local: Compromise of System Integrity SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant DL145 Gen11 - Prior to v1.40 HPE ProLiant DL325 Gen11 Server - Prior to v2.30 HPE ProLiant DL345 Gen11 Server - Prior to v2.30 HPE ProLiant DL365 Gen11...

PT-2025-9979

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been resolved, related to the handling of PCIe ports during system suspend. The issue occurs when the system is suspended and certain root ports a...

Multi-Vendor BIOS Security Vulnerabilities (January 2025) - Lenovo Support US

No description provided...

CVE-2024-42444

APTIOV contains a vulnerability in BIOS where an attacker may cause a TOCTOU Race Condition by local means. Successful exploitation of this vulnerability may lead to execution of arbitrary code on the target device...

CVE-2024-42444

APTIOV contains a vulnerability in BIOS where an attacker may cause a TOCTOU Race Condition by local means. Successful exploitation of this vulnerability may lead to execution of arbitrary code on the target device...

CVE-2024-42444

CVE-2024-42444 affects AMI AptioV BIOS and is described as a TOCTOU race condition involving BIOS components (DMA/SMM) that may allow local attackers to execute arbitrary code on the target device. The available sources consistently report a BIOS-level vulnerability with a TOCTOU contention condi...

CVE-2024-42444 TOCTOU Race Condition between DMA and SMM

APTIOV contains a vulnerability in BIOS where an attacker may cause a TOCTOU Race Condition by local means. Successful exploitation of this vulnerability may lead to execution of arbitrary code on the target device...

CVE-2024-42444 TOCTOU Race Condition between DMA and SMM

APTIOV contains a vulnerability in BIOS where an attacker may cause a TOCTOU Race Condition by local means. Successful exploitation of this vulnerability may lead to execution of arbitrary code on the target device...

AMI AptioV 安全漏洞

AMI AptioV is a firmware-related editor from AMI USA. A security vulnerability exists in AMI AptioV that stems from the presence of a TOCTOU contention condition in the BIOS that can lead to the execution of arbitrary code...

PT-2025-2636 · Aptiov · Aptiov

Name of the Vulnerable Software and Affected Versions: APTIOV affected versions not specified Description: The issue is related to a TOCTOU Race Condition in the BIOS of APTIOV, which can be exploited by an attacker using local means. This could potentially lead to the execution of arbitrary code...

CVE-2024-55642

In the Linux kernel, the following vulnerability has been resolved: block: Prevent potential deadlocks in zone write plug error recovery Zone write plugging for handling writes to zones of a zoned block device always execute a zone report whenever a write BIO to a zone fails. The intent of this i...

Researchers Uncover Major Security Flaw in Illumina iSeq 100 DNA Sequencers

Cybersecurity researchers have uncovered firmware security vulnerabilities in the Illumina iSeq 100 DNA sequencing instrument that, if successfully exploited, could permit attackers to brick or plant persistent malware on susceptible devices. "The Illumina iSeq 100 used a very outdated...

Amazon Linux 2 : edk2 (ALAS-2024-2722)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2024-2722 advisory. A heap overflow in LzmaUefiDecompressGetInfo function in EDK II. CVE-2021-28211 BootPerformanceTable pointer is read from an NVRAM variable in PEI. Recommend setting...

Important: edk2

Issue Overview: A heap overflow in LzmaUefiDecompressGetInfo function in EDK II. CVE-2021-28211 BootPerformanceTable pointer is read from an NVRAM variable in PEI. Recommend setting PcdFirmwarePerformanceDataTableS3Support to FALSE. CVE-2021-28216 A BIOS bug in firmware for a particular PC model...