295 matches found
Intel Server M50FCP和Intel Server D50DNP 安全漏洞
Intel Server M50FCP and Intel Server D50DNP are both servers from Intel Corporation USA. A security vulnerability exists in Intel Server M50FCP and Intel Server D50DNP that stems from improper initialization of the UEFI firmware, which could lead to information disclosure...
PT-2025-15273
Name of the Vulnerable Software and Affected Versions EDK2 affected versions not specified Description The issue is related to a vulnerability in the HashPeImageByType function, where a user can cause a read out of bounds by sending corrupted data via the network. This could lead to a loss of...
Analyzing open-source bootloaders: Finding vulnerabilities faster with AI
By leveraging Microsoft Security Copilot to expedite the vulnerability discovery process, Microsoft Threat Intelligence uncovered several vulnerabilities in multiple open-source bootloaders, impacting all operating systems relying on Unified Extensible Firmware Interface UEFI Secure Boot as well ...
UBUNTU-CVE-2025-21872
In the Linux kernel, the following vulnerability has been resolved: efi: Don't map the entire mokvar table to determine its size Currently, when validating the mokvar table, we remap the entire table on each iteration of the loop, adding space as we discover new entries. If the table grows over a...
Vulnerabilities of EFI/unaccepted kernel components of the Linux operating system, allowing attackers to trigger a service failure
The vulnerability of the listdel function in efi/unaccepted kernel components of the Linux operating system is related to improper locking mechanisms. Exploiting this vulnerability could allow an attacker to trigger a service failure...
AZL-58803 CVE-2025-2295 affecting package edk2 for versions less than 20240524git3e722403cd16-14
EDK2 contains a vulnerability in BIOS where a user may cause an Integer Overflow or Wraparound by network means. A successful exploitation of this vulnerability may lead to denial of service...
CVE-2024-56182
A vulnerability has been identified in SIMATIC Field PG M5 All versions, SIMATIC Field PG M6 All versions V26.01.12, SIMATIC IPC BX-21A All versions V31.01.07, SIMATIC IPC BX-32A All versions V29.01.07, SIMATIC IPC BX-39A All versions V29.01.07, SIMATIC IPC BX-59A All versions V32.01.04, SIMATIC...
Siemens SIMATIC 缓冲区错误漏洞
Siemens SIMATIC is a configuration software from Siemens Germany. A buffer error vulnerability exists in Siemens SIMATIC, which arises from an inadequate protection mechanism for EFI variables, and could allow an authenticated attacker to modify the secure boot configuration. The following produc...
microcode_ctl: Improper input validation in UEFI firmware
An improper input validation flaw was found in UEFI firmware. Some IntelR processors may allow a privileged user to enable privilege escalation via local access...
microcode_ctl: Improper input validation in UEFI firmware
An improper input validation flaw was found in UEFI firmware. Some IntelR processors may allow a privileged user to enable privilege escalation via local access...
microcode_ctl: Improper input validation in UEFI firmware
An improper input validation flaw was found in UEFI firmware. Some IntelR Processors may allow a privileged user to enable privilege escalation via local access...
microcode_ctl: Improper input validation in XmlCli feature for UEFI firmware
An improper input validation flaw was found in the XmlCli feature for UEFI firmware. Some IntelR processors may allow a privileged user to enable privilege escalation via local access...
microcode_ctl: Improper input validation in UEFI firmware
An improper input validation flaw was found in UEFI firmware. Some IntelR processors may allow a privileged user to enable privilege escalation via local access...
microcode_ctl: Improper input validation in UEFI firmware
An improper input validation flaw was found in UEFI firmware. Some IntelR Processors may allow a privileged user to enable privilege escalation via local access...
microcode_ctl: Improper input validation in UEFI firmware
An improper input validation flaw was found in UEFI firmware. Some IntelR Processors may allow a privileged user to enable privilege escalation via local access...
microcode_ctl: Improper input validation in XmlCli feature for UEFI firmware
An improper input validation flaw was found in the XmlCli feature for UEFI firmware. Some IntelR processors may allow a privileged user to enable privilege escalation via local access...
kernel: efi: runtime: Fix potential overflow of soft-reserved region size
A flaw was found in the Linux kernel. Due to an integer overflow, certain EFI-related memory reservations might receive a size other than expected, leading to a denial of service...
The vulnerability of UEFI microprogramming systems of Intel processors allows a hacker to gain unauthorized access to protected information.
The vulnerability of Intel UEFI microprogramming systems is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
The vulnerability of UEFI microprogramming systems in Intel processors allows attackers to enhance their privileges.
The vulnerability of Intel UEFI microprogramming system processors is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability can allow an attacker to enhance their privileges...
The vulnerability of UEFI microprogramming systems of Intel processors allows a hacker to gain unauthorized access to protected information.
The vulnerability of Intel UEFI microprogramming systems lies in the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...