3641 matches found
PT-2025-6689
Name of the Vulnerable Software and Affected Versions GRUB2 affected versions not specified Description The issue arises when reading the language .mo file in grub mofile open, where GRUB2 fails to verify an integer overflow when allocating its internal buffer. A crafted .mo file may lead the...
GNU GRUB 缓冲区错误漏洞
GNU GRUB is a Linux system boot program from the GNU community. GNU GRUB suffers from a buffer overflow vulnerability, which stems from an integer overflow problem contained in the read module, that can be exploited by an attacker to overwrite sensitive information, thereby bypassing secure boot...
PT-2025-6873
Name of the Vulnerable Software and Affected Versions Fedora Linux kernel versions 6.12 through 6.12.13 Description A critical flaw in the Fedora Linux kernel disables Lockdown Mode by default, potentially allowing attackers to bypass Secure Boot protections. This issue affects systems starting a...
PT-2025-6690
Name of the Vulnerable Software and Affected Versions grub2 affected versions not specified Description A defect was found in grub2. When reading a symbolic link's name from a UFS filesystem, grub2 fails to validate the string length taken as an input. This lack of validation may lead to a heap...
PT-2025-6687
Name of the Vulnerable Software and Affected Versions grub2 affected versions not specified Description A flaw in the JPEG parser allows a specially crafted JPEG file to cause incorrect bounds checking of internal buffers, leading to an out-of-bounds write. This condition could potentially allow ...
Azure Linux 3.0 Security Update: grub2 (CVE-2022-2601)
The version of grub2 installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-2601 advisory. - A buffer overflow was found in grubfontconstructglyph. A malicious crafted pf2 font can lead to an overflow wh...
CVE-2022-2483
The bootloader in the Nokia ASIK AirScale system module versions 474021A.101 and 474021A.102 loads public keys for firmware verification signature. If an attacker modifies the flash contents to corrupt the keys, secure boot could be permanently disabled on a given device...
CVE-2022-4020
Vulnerability in the HQSwSmiDxe DXE driver on some consumer Acer Notebook devices may allow an attacker with elevated privileges to modify UEFI Secure Boot settings by modifying an NVRAM variable...
CVE-2020-11284
Locked memory can be unlocked and modified by non secure boot loader through improper system call sequence making the memory region untrusted source of input for secure boot loader in Snapdragon Auto, Snapdragon Compute, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructur...
CVE-2024-6287
Incorrect Calculation vulnerability in Renesas arm-trusted-firmware allows Local Execution of Code. When checking whether a new image invades/overlaps with a previously loaded image the code neglects to consider a few cases. that could An attacker to bypass memory range restriction and overwrite ...
ROS-20250130-01
Linux operating system kernel vulnerability is linked to security configuration errors. Exploitation exploitation of the vulnerability could allow an attacker to bypass the secure boot mechanism and escalate privileges...
Palo Alto Firewalls Found Vulnerable to Secure Boot Bypass and Firmware Exploits
An exhaustive evaluation of three firewall models from Palo Alto Networks has uncovered a host of known security flaws impacting the devices' firmware as well as misconfigured security features. "These weren't obscure, corner-case vulnerabilities," security vendor Eclypsium said in a report share...
The vulnerability of the Secure Boot Security component of the Windows operating system, which allows a hacker to circumvent security restrictions
The vulnerability of the Secure Boot Security component of the Windows operating system is related to a breach of the data protection mechanism. Exploiting this vulnerability could allow an attacker to circumvent security restrictions...
Unspecified Vulnerability in Microsoft Windows Secure Boot (CNVD-2025-02537)
Microsoft Windows Secure Boot is a secure boot from Microsoft USA. A security vulnerability exists in Microsoft Windows Secure Boot. An attacker could exploit the vulnerability to bypass certain features...
New UEFI Secure Boot Vulnerability Could Allow Attackers to Load Malicious Bootkits
Details have emerged about a now-patched security vulnerability that could allow a bypass of the Secure Boot mechanism in Unified Extensible Firmware Interface UEFI systems. The vulnerability, assigned the CVE identifier CVE-2024-7344 CVSS score: 6.7, resides in a UEFI application signed by...
The vulnerability in the implementation of the Secure Boot protocol for Windows operating systems allows attackers to disclose sensitive information that is protected by this security mechanism.
The vulnerability of the Secure Boot secure bootloading protocol for the Windows operating system is related to access control errors. Exploiting this vulnerability could allow a perpetrator to disclose protected information...
CVE-2025-21213
Secure Boot Security Feature Bypass Vulnerability...
CVE-2025-21215
Secure Boot Security Feature Bypass Vulnerability...
