4155 matches found
CVE-2023-48733
An insecure default to allow UEFI Shell in EDK2 was left enabled in Ubuntu's EDK2. This allows an OS-resident attacker to bypass Secure Boot...
CVE-2023-48733
An insecure default to allow UEFI Shell in EDK2 was left enabled in Ubuntu's EDK2. This allows an OS-resident attacker to bypass Secure Boot...
CVE-2023-48733
An insecure default to allow UEFI Shell in EDK2 was left enabled in Ubuntu's EDK2. This allows an OS-resident attacker to bypass Secure Boot...
[SECURITY] [DSA 5624-1] edk2 security update
------------------------------------------------------------------------- Debian Security Advisory DSA-5624-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff February 14, 2024 https://www.debian.org/security/faq -...
PT-2024-13784
Name of the Vulnerable Software and Affected Versions LXD affected versions not specified Description The issue is related to an insecure default setting that allows the UEFI Shell in EDK2, which was left enabled in LXD. This setting enables an OS-resident attacker to bypass Secure Boot...
CVE-2023-49721
An insecure default to allow UEFI Shell in EDK2 was left enabled in LXD. This allows an OS-resident attacker to bypass Secure Boot...
CVE-2023-48733
An insecure default to allow UEFI Shell in EDK2 was left enabled in Ubuntu's EDK2. This allows an OS-resident attacker to bypass Secure Boot...
CVE-2023-49721: Incorrect Default Permissions
An insecure default to allow UEFI Shell in EDK2 was left enabled in LXD. This allows an OS-resident attacker to bypass Secure Boot...
EDK2 Security Vulnerability
EDK2 is a set of cross-platform firmware development environments from the Tianocore community based on the UEFI and PI specifications. EDK2 suffers from a security vulnerability that stems from allowing insecure default settings that allow an attacker to bypass secure boot...
EDK2 Security Vulnerability
EDK2 is a set of cross-platform firmware development environments from the Tianocore community based on the UEFI and PI specifications. EDK2 suffers from a security vulnerability that stems from allowing insecure default settings that allow an attacker to bypass secure boot...
CVE-2023-48733: Initialization of a Resource with an Insecure Default
An insecure default to allow UEFI Shell in EDK2 was left enabled in Ubuntu's EDK2. This allows an OS-resident attacker to bypass Secure Boot...
UBUNTU-CVE-2023-48733
An insecure default to allow UEFI Shell in EDK2 was left enabled in Ubuntu's EDK2. This allows an OS-resident attacker to bypass Secure Boot...
February 13, 2024—KB5034768 (OS Build 17763.5458) - EXPIRED
None None...
February 13, 2024—KB5034767 (OS Build 14393.6709) - EXPIRED
None None...
February 13, 2024—KB5034770 (OS Build 20348.2322)
None None...
February 13, 2024—KB5034769 (OS Build 25398.709)
None None...
February 13, 2024—KB5034774 (OS Build 10240.20469) - EXPIRED
None None...
February 13, 2024—KB5034766 (OS Build 22000.2777)
None None...
Grub2 shim_lock Break Trust Chain
The vulnerability of the shimlock component in the Grub2 operating system is related to the loading of non-atomic files into the secure boot mechanism that supports shim. Exploiting this vulnerability can allow an attacker to break the trust chain of the secure boot mechanism...