EUVD-2021-29522

Malicious code in bioql PyPI...

EUVD-2022-35558

Malicious code in bioql PyPI...

EUVD-2022-37017

Malicious code in bioql PyPI...

EUVD-2023-57334

Malicious code in bioql PyPI...

EUVD-2022-38769

Malicious code in bioql PyPI...

EUVD-2022-36942

Malicious code in bioql PyPI...

EUVD-2022-36946

Malicious code in bioql PyPI...

EUVD-2022-36944

Malicious code in bioql PyPI...

EUVD-2022-52822

Malicious code in bioql PyPI...

EUVD-2023-26751

Malicious code in bioql PyPI...

EUVD-2021-30451

Malicious code in bioql PyPI...

EUVD-2022-37348

Malicious code in bioql PyPI...

EUVD-2022-33619

Malicious code in bioql PyPI...

EUVD-2022-28749

Malicious code in bioql PyPI...

Dell Client BIOS Improper SMM Communication Buffer Verification (DSA-2024-104)

The Dell BIOS on the remote device is missing a security patch and is, therefore, affected by an Improper SMM communication buffer verification vulnerability. A physical high privileged attacker could potentially exploit this vulnerability leading to arbitrary writes to SMRAM. Note that Nessus ha...

CVE-2025-33045 Legacy Serial Redirection SMRAM Vulnerabilities

APTIOV contains vulnerabilities in the BIOS where a privileged user may cause “Write-what-where Condition” and “Exposure of Sensitive Information to an Unauthorized Actor” through local access. The successful exploitation of these vulnerabilities can lead to information disclosure, arbitrary data...

CVE-2025-4277: Improper Input Validation

Tcg2Smm has a vulnerability which can be used to write arbitrary memory inside SMRAM and execute arbitrary code at SMM level...

PT-2025-32958

Name of the Vulnerable Software and Affected Versions: Tcg2Smm affected versions not specified Description: Tcg2Smm contains a flaw that allows writing arbitrary memory inside SMRAM and executing arbitrary code at the SMM level. Recommendations: At the moment, there is no information about a newe...

CVE-2025-7028

A vulnerability in the Software SMI handler SwSmiInputValue 0x20 allows a local attacker to supply a crafted pointer FuncBlock through RBX and RCX register values. This pointer is passed unchecked into multiple flash management functions ReadFlash, WriteFlash, EraseFlash, and GetFlashInfo that...

CVE-2025-7027: Undefined Security Weakness

A vulnerability in the Software SMI handler SwSmiInputValue 0xB2 allows a local attacker to control both the read and write addresses used by the CommandRcx1 function. The write target is derived from an unvalidated UEFI NVRAM variable SetupXtuBufferAddress, while the write content is read from a...