CVE-2024-12673: Execution with Unnecessary Privileges

An improper privilege vulnerability was reported in a BIOS customization feature of Lenovo Vantage on SMB notebook devices which could allow a local attacker to elevate privileges on the system. This vulnerability only affects Vantage installed on these devices: Lenovo V Series Gen 5 ThinkBook 14...

Multi-Vendor BIOS Security Vulnerabilities (February 2025) - Lenovo Support US

No description provided...

Multi-Vendor BIOS Security Vulnerabilities (February 2025) - Lenovo Support US

No description provided...

CVE-2024-33659

AMI APTIOV contains a vulnerability in BIOS where an attacker may cause an Improper Input Validation by a local attacker. Successful exploitation of these vulnerabilities may lead to overwriting arbitrary memory and execute arbitrary code at SMM level, also impacting Confidentiality, Integrity, a...

CVE-2024-33659 BiosGuard Buffer Overflow and TOCTOU Vulnerability

AMI APTIOV contains a vulnerability in BIOS where an attacker may cause an Improper Input Validation by a local attacker. Successful exploitation of these vulnerabilities may lead to overwriting arbitrary memory and execute arbitrary code at SMM level, also impacting Confidentiality, Integrity, a...

CVE-2024-33659: Improper Input Validation

AMI APTIOV contains a vulnerability in BIOS where an attacker may cause an Improper Input Validation by a local attacker. Successful exploitation of these vulnerabilities may lead to overwriting arbitrary memory and execute arbitrary code at SMM level, also impacting Confidentiality, Integrity, a...

HPESBHF04794 rev.2 - Certain HPE ProLiant DL/ML, Alletra, Apollo, Edgeline, MicroServer and Synergy Servers Using Certain Intel Processor BIOS, INTEL-SA-01213, 2025.1 IPU - Intel SGX Advisory, Denial of Service Vulnerability

Potential Security Impact: Local: Denial of Service DoS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Alletra 4110 - Prior to v2.4401-17-2025 HPE Alletra 4120 - Prior to v2.4401-17-2025 HPE Alletra 4140 - Prior to v2.4401-17-2025 HPE ProLiant DL110 Gen11 - Prior to...

HPESBHF04799 rev.1 - Certain HPE ProLiant DL/ML, Alletra, Edgeline and Synergy Servers Using Certain Intel Processor BIOS, INTEL-SA-01194, UPLR3 Intel Data Streaming Accelerator Advisory, Denial of Service Vulnerability

Potential Security Impact: Local: Denial of Service DoS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Alletra 4110 -Prior to v2.4401-17-2025 HPE Alletra 4120 -Prior to v2.4401-17-2025 HPE Alletra 4140 -Prior to v2.4401-17-2025 HPE ProLiant DL110 Gen11 -Prior to v2.4401-17-20...

HPESBHF04795 rev.1 - Certain HPE SimpliVity AMD Servers Using Certain AMD EPYC Processors, AMD-SB-7027: AMD System Management Mode (SMM) Vulnerabilities, Local Arbitrary Code Execution Vulnerabilities

Potential Security Impact: Local: Arbitrary Code Execution SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE SimpliVity 325 Gen10 - Prior to HPE SimpliVity Gen10 Support Pack SVTSP v20250131 HPE SimpliVity 325 Gen10 Plus - Prior to HPE SimpliVity Gen10 Support Pack SVTSP v202501...

BIOS and System Firmware Update Package Advisory

Summary: A potential security vulnerability in some BIOS and System Firmware Update Package for Intel® Server M50FCP family may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2024-42492 Description:...

HPESBHF04801 rev.1 - Certain HPE StoreEasy Servers Using Certain Intel Processor BIOS, INTEL-SA-01166, 2024.4 IPU, Intel Processor Advisory, Local Denial of Service Vulnerability

Potential Security Impact: Local: Denial of Service DoS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE StoreEasy 1470 Performance - Prior to v2.4401-17-2025 HPE StoreEasy 1470 Storage - Prior to v2.4401-17-2025 HPE StoreEasy 1570 Performance - Prior to v2.4401-17-2025 HPE...

HPESBHF04792 rev.1 - Certain HPE ProLiant DL/ML, Alletra, Edgeline and Synergy Servers Using Certain Intel Processor BIOS, INTEL-SA-01166, 2024.4 IPU, Intel Processor Advisory, Local Denial of Service Vulnerability

Potential Security Impact: Local: Denial of Service DoS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Alletra 4110 - Prior to v2.4401-17-2025 HPE Alletra 4120 - Prior to v2.4401-17-2025 HPE Alletra 4140 - Prior to v2.4401-17-2025 HPE ProLiant DL110 Gen11 - Prior to...

HPESBHF04786 rev.1 - Certain HPE ProLiant AMD Servers Using Certain AMD EPYC Processors, AMD-SB-7028: AMD System Management Mode (SMM) Callout Vulnerability, Arbitrary Code Execution Vulnerability

Potential Security Impact: Local: Arbitrary Code Execution SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant DL325 Gen10 Plus server - Prior to v3.4010-04-2024 HPE ProLiant XL225n Gen10 Plus 1U Node - Prior to v3.4010-04-2024 HPE ProLiant XL645d Gen10 Plus Server - Prio...

HPESBHF04802 rev.1 - Certain HPE StoreEasy Servers Using Certain Intel Processor BIOS, INTEL-SA-01194, UPLR3 Intel Data Streaming Accelerator Advisory, Denial of Service Vulnerability

Potential Security Impact: Local: Denial of Service DoS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE StoreEasy 1470 Performance - Prior to v2.4401-17-2025 HPE StoreEasy 1470 Storage - Prior to v2.4401-17-2025 HPE StoreEasy 1570 Performance - Prior to v2.4401-17-2025 HPE...

Lenovo Vantage Privilege Escalation Vulnerability - Lenovo Support US

No description provided...

Azure Linux 3.0 Security Update: kernel (CVE-2024-36897)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-36897 advisory. - In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Atom Integrated System...

CVE-2022-34152

Improper input validation in BIOS firmware for some IntelR NUC Boards, IntelR NUC Kits before version TY0070 may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2022-21198

Time-of-check time-of-use race condition in the BIOS firmware for some IntelR Processors may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2022-38099

Improper input validation in BIOS firmware for some IntelR NUC 11 Compute Elements before version EBTGL357.0065 may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2022-29510

Improper buffer restrictions in some IntelR Server Board M10JNP2SB BIOS firmware before version 7.219 may allow a privileged user to potentially enable escalation of privilege via local access...