3643 matches found
CVE-2022-24936 Gecko Standalone Bootloader vulnerability may allow bypassing application secure boot in some Series 2 devices
Out-of-Bounds error in GBL parser in Silicon Labs Gecko Bootloader version 4.0.1 and earlier allows attacker to overwrite flash Sign key and OTA decryption key via malicious bootloader upgrade...
Huawei EulerOS: Security Advisory for grub2 (EulerOS-SA-2022-2611)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
August 9, 2022—KB5016622 (OS Build 14393.5291) - EXPIRED
None None...
August 9, 2022—KB5016616 (OS Builds 19042.1889, 19043.1889, and 19044.1889)
None None...
August 9, 2022—KB5016629 (OS Build 22000.856)
None None...
August 9, 2022—KB5016684 (Security-only update)
None None...
August 9, 2022—KB5016681 (Monthly Rollup)
None None...
August 9, 2022—KB5016623 (OS Build 17763.3287)
None None...
August 9, 2022—KB5016627 (OS Build 20348.887)
None None...
August 9, 2022—KB5016676 (Monthly Rollup)
None None...
August 9, 2022—KB5016672 (Monthly Rollup)
None None...
August 9, 2022—KB5016683 (Security-only update)
None None...
August 9, 2022—KB5016639 (OS Build 10240.19387) - EXPIRED
None None...
EulerOS Virtualization 3.0.6.0 : grub2 (EulerOS-SA-2022-2562)
According to the versions of the grub2 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - GRUB2 fails to validate kernel signature when booted directly without shim, allowing secure boot to be bypassed. This only affects...
EulerOS Virtualization 3.0.6.6 : grub2 (EulerOS-SA-2022-2504)
According to the versions of the grub2 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A crafted 16-bit grayscale PNG image may lead to a out-of-bounds write in the heap area. An attacker may take advantage of that to...
GLSA-202209-12 : GRUB: Multiple Vulnerabilities
The remote host is affected by the vulnerability described in GLSA-202209-12 GRUB: Multiple Vulnerabilities - A crafted 16-bit grayscale PNG image may lead to a out-of-bounds write in the heap area. An attacker may take advantage of that to cause heap data corruption or eventually arbitrary code...
The vulnerability affects the implementation of the Secure Boot protocol for operating system bootloaders like Grub2. This allows attackers to execute arbitrary code and gain full control over the device.
The vulnerability of the Secure Boot implementation of the Grub2 operating system is related to improper verification of the cryptographic signature. Exploiting this vulnerability allows a attacker to execute arbitrary code and gain full control over the device...
CVE-2022-40261
An attacker can exploit this vulnerability to elevate privileges from ring 0 to ring -2, execute arbitrary code in System Management Mode - an environment more privileged than operating system OS and completely isolated from it. Running arbitrary code in SMM additionally bypasses SMM-based SPI...
CVE-2022-40250
An attacker can exploit this vulnerability to elevate privileges from ring 0 to ring -2, execute arbitrary code in System Management Mode - an environment more privileged than operating system OS and completely isolated from it. Running arbitrary code in SMM additionally bypasses SMM-based SPI...
CVE-2022-40261
CVE-2022-40261 concerns the OverClockSmiHandler SMM driver. The provided documents describe a local-privilege-escalation flaw that allows an attacker to elevate to System Management Mode (ring -2), execute arbitrary code in SMM, and bypass SMM‑based SPI flash protections, enabling a malicious BIO...