Insyde InsydeH2O 权限许可和访问控制问题漏洞

Insyde InsydeH2O is a C source from Insyde Software Taiwan, China that implements the new technology "EFI/UEFI" specification, designed to replace the legacy BIOS Basic Input/Output System. Operating System H2O UEFI firmware is vulnerable to permission and access control issues, which can be...

CVE-2022-21899

Windows Extensible Firmware Interface Security Feature Bypass Vulnerability...

CVE-2022-21899

Technical details about CVE-2022-21899 are not provided in the connected documents. The references show listings and patches but do not describe the vulnerability specifics, affected products, root cause, or fixes. Monitor for updates.

CVE-2022-21899: Undefined Security Weakness

Windows Extensible Firmware Interface Security Feature Bypass Vulnerability...

Insyde InsydeH2O 缓冲区错误漏洞

Insyde InsydeH2O is a C source from Insyde Software Taiwan, China that implements the new technology "EFI/UEFI" specification, designed to replace the legacy BIOS Basic Input/Output System.Insyde InsydeH2O is vulnerable to a buffer overflow A buffer overflow vulnerability exists in InsydeH2O, whi...

edk2: unlimited FV recursion, round 2

A flaw was found in edk2. An unlimited recursion in DxeCore may allow an attacker to corrupt the system memory. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...

Tianocore Edk2 安全漏洞

Tianocore Edk2 is a cross-platform firmware development environment from the Tianocore community that follows the UEFI and PI specifications. A security vulnerability exists in Tianocore Edk2 that allows an attacker to access sensitive data...

kernel: security bypass in certs/blacklist.c and certs/system_keyring.c

A flaw was found in the Linux kernel in certs/blacklist.c, When signature entries for EFICERTX509GUID are contained in the Secure Boot Forbidden Signature Database, the entries are skipped. This can cause a security threat and breach system integrity, confidentiality and even lead to a denial of...

TianoCore EDK2 加密问题漏洞

EDK2 is a set of cross-platform firmware development environments from the TianoCore Tianocore community based on the UEFI and PI specifications. EDK2 suffers from a cryptographic issue vulnerability that stems from a potential security risk in the example EDK2 encrypted private key in IpSecDxe.e...

PT-2024-11236 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.10.45/5.12.12 Description: The issue arises when memory marked as EFI boot services data is not properly mapped as encrypted under SEV, potentially leading to a kernel crash at boot. This occurs because some...

The vulnerability in the driver/firmware/EFI code of the Linux operating system allows a hacker to bypass security restrictions.

The vulnerability in the driver/firmware/EFI code of the Linux operating system relates to bypassing security functions. Exploiting this vulnerability can allow an attacker to circumvent security restrictions...

CVE-2021-26892

Windows Extensible Firmware Interface Security Feature Bypass Vulnerability...

CVE-2021-26892 Windows Extensible Firmware Interface Security Feature Bypass Vulnerability

...

CVE-2021-26892

Technical details about CVE-2021-26892 (affected product, root cause, impact, fixes) are not provided in the connected documents; no public details are included here. Monitor for updates.

CVE-2021-26892: Undefined Security Weakness

Windows Extensible Firmware Interface Security Feature Bypass Vulnerability...

Microsoft Windows 安全漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from the U.S.-based Microsoft Corporation. A security vulnerability exists in the Windows Extensible Firmware Interface. The following products and editions are affected:Windows 10 Version 1607 for x64-based...

PT-2021-2275 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to a security feature bypass vulnerability in the Windows Extensible Firmware Interface. This vulnerability allows attackers to bypass existing security restrictions...

Kaspersky Security Vulnerabilities

Kaspersky module is an application component of the Russian company Kaspersky Kaspersky. It provides antivirus protection. A security vulnerability exists in Kaspersky that allows loading of untrusted UEFI modules due to their insufficient authenticity checks...

Security feature bypass

A security feature bypass vulnerability exists when Microsoft Windows fails to handle file creation permissions, which could allow an attacker to create files in a protected Unified Extensible Firmware Interface UEFI location. To exploit this vulnerability, an attacker could run a specially craft...

CVE-2020-16910: Improper Preservation of Permissions

A security feature bypass vulnerability exists when Microsoft Windows fails to handle file creation permissions, which could allow an attacker to create files in a protected Unified Extensible Firmware Interface UEFI location. To exploit this vulnerability, an attacker could run a specially craft...