The vulnerability of the Resume Extensible Firmware Interface in Microsoft Windows operating systems allows a hacker to bypass the UEFI Secure Boot security mechanism.

The vulnerability of the Resume Extensible Firmware Interface in Microsoft Windows operating systems is related to the use of an unreliable pointer. Exploiting this vulnerability could allow an attacker to bypass the UEFI Secure Boot security mechanism...

The vulnerability of the Resume Extensible Firmware Interface in Microsoft Windows operating systems allows a hacker to bypass the UEFI Secure Boot security mechanism.

The vulnerability of the Resume Extensible Firmware Interface in Microsoft Windows operating systems is related to the use of an unreliable pointer. Exploiting this vulnerability could allow an attacker to bypass the UEFI Secure Boot security mechanism...

CVE-2024-37982

Windows Resume Extensible Firmware Interface Security Feature Bypass Vulnerability...

CVE-2024-37982

Windows Resume Extensible Firmware Interface Security Feature Bypass Vulnerability...

CVE-2024-37983

Windows Resume Extensible Firmware Interface Security Feature Bypass Vulnerability...

CVE-2024-37983

Windows Resume Extensible Firmware Interface Security Feature Bypass Vulnerability...

CVE-2024-37976

Windows Resume Extensible Firmware Interface Security Feature Bypass Vulnerability...

CVE-2024-37976

Windows Resume Extensible Firmware Interface Security Feature Bypass Vulnerability...

CVE-2024-37983 Windows Resume Extensible Firmware Interface Security Feature Bypass Vulnerability

...

CVE-2024-37983 Windows Resume Extensible Firmware Interface Security Feature Bypass Vulnerability

...

CVE-2024-37982 Windows Resume Extensible Firmware Interface Security Feature Bypass Vulnerability

...

CVE-2024-37982

Technical details about CVE-2024-37982 are not provided in the connected documents. No specifics on affected components, root cause, or fixes are available here. Monitor official advisories/updates for authoritative guidance.

CVE-2024-37982 Windows Resume Extensible Firmware Interface Security Feature Bypass Vulnerability

...

CVE-2024-37976

CVE-2024-37976 is described as a Windows EFI Partition vulnerability: a security feature bypass (Circumvention of security measure) with CVSS 3.1 base score 6.7 (LOCAL, LOW attack complexity, HIGH privileges required, no user interaction). The connected data specifies affected component as Window...

PT-2024-6777 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to an integer overflow in the Resume Extensible Firmware Interface of Microsoft Windows operating systems. This allows an attacker to bypass the UEFI Secure Boot...

PT-2024-6778 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows Resume Extensible Firmware Interface affected versions not specified Description: The issue is related to a security-feature bypass vulnerability in the Resume Extensible Firmware Interface of Microsoft Windows operating systems. It...

AZL-49713 CVE-2024-38796 affecting package hvloader for versions less than 1.0.1-13

EDK2 contains a vulnerability in the PeCoffLoaderRelocateImage. An Attacker may cause memory corruption due to an overflow via an adjacent network. A successful exploit of this vulnerability may lead to a loss of Confidentiality, Integrity, and/or Availability...

There's a possible overflow in handle_image() when shim tries to load and execute crafted EFI executables

...

PT-2024-7323 · Intel +1 · Intel Uefi Firmware +1

Name of the Vulnerable Software and Affected Versions: Intel UEFI Firmware affected versions not specified Description: The issue is related to improper input validation in the UEFI firmware of certain Intel processors. This flaw may allow a privileged user to potentially enable escalation of...

PT-2024-7299 · Intel · Intel Uefi Firmware

Name of the Vulnerable Software and Affected Versions: Intel UEFI firmware affected versions not specified Description: A race condition in the UEFI firmware for some Intel processors may allow a privileged user to potentially enable escalation of privilege via local access. This issue is caused ...