94 matches found
EUVD-2023-32375
Malicious code in bioql PyPI...
EUVD-2023-26468
Malicious code in bioql PyPI...
CVE-2025-33045 Legacy Serial Redirection SMRAM Vulnerabilities
APTIOV contains vulnerabilities in the BIOS where a privileged user may cause “Write-what-where Condition” and “Exposure of Sensitive Information to an Unauthorized Actor” through local access. The successful exploitation of these vulnerabilities can lead to information disclosure, arbitrary data...
CVE-2025-33045
AMI AptioV BIOS contains BIOS-level vulnerabilities enabling a privileged local attacker to perform a write-what-where operation and expose sensitive information, potentially leading to information disclosure and arbitrary data writes with impact to confidentiality, integrity, and availability. S...
SMM Memory Corruption Vulnerability in the AMI Aptio's SMM Module Across Multiple Devices
Overview System Management Mode SMM memory corruption vulnerabilities have been identified in UEFI modules present in AMI Aptio UEFI firmware. An attacker could exploit this vulnerability to elevate privileges and execute arbitrary code in the highly privileged SMM environment. Users should apply...
CVE-2025-22830 SmiFlash Race Condition Vulnerability
APTIOV contains a vulnerability in BIOS where a skilled user may cause “Race Condition” by local access. A successful exploitation of this vulnerability may lead to resource exhaustion and impact Confidentiality, Integrity, and Availability...
CVE-2025-22830
The CVE-2025-22830 entry concerns AMI Aptiov BIOS whoseRace Condition occurs when a user with local access can trigger a vulnerability in the BIOS. The root cause is a local race condition that can lead to resource exhaustion, with impacts stated as Confidentiality, Integrity, and Availability be...
CVE-2023-28737
Improper initialization in some IntelR Aptio V UEFI Firmware Integrator Tools may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2023-28397
Improper access control in some IntelR Aptio V UEFI Firmware Integrator Tools may allow an authenticated to potentially enable escalation of privileges via local access...
CVE-2023-26589
Use after free in some IntelR Aptio V UEFI Firmware Integrator Tools may allowed an authenticated user to potentially enable denial of service via local access...
CVE-2023-25949
Uncontrolled resource consumption in some IntelR Aptio V UEFI Firmware Integrator Tools may allow an authenticated user to potentially enable denial of service via local access...
CVE-2023-22310
Race condition in some IntelR Aptio V UEFI Firmware Integrator Tools may allow an authenticated user to potentially enable denial of service via local access...
CVE-2023-28723
Exposure of sensitive information to an unauthorized actor in some IntelR Aptio V UEFI Firmware Integrator Tools may allow an authenticated user to potentially enable information disclosure via local access...
AMI APTIOV BIOS 安全漏洞
AMI APTIOV BIOS is a modern BIOS firmware solution based on the UEFI specification from AMI. A security vulnerability exists in the AMI APTIOV BIOS that stems from a TOCTOU competitive condition and could lead to arbitrary code execution...
CVE-2024-54084
APTIOV contains a vulnerability in BIOS where an attacker may cause a Time-of-check Time-of-use TOCTOU Race Condition by local means. Successful exploitation of this vulnerability may lead to arbitrary code execution...
AMI Aptio 安全漏洞
AMI Aptio is a firmware from AMI. A security vulnerability exists in AMI Aptio that originates in the BIOS that could cause a local attacker to trigger a race condition to execute arbitrary code...
The vulnerability of the tools for configuring and integrating Intel Aptio V UEFI firmware in Intel NUC devices stems from access control flaws, allowing attackers to exploit these vulnerabilities to gain increased privileges.
The vulnerability of the tools for configuring and integrating Intel Aptio V UEFI firmware on Intel NUC devices is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...
CVE-2022-36374
Improper access control in some IntelR Aptio V UEFI Firmware Integrator Tools before version iDmi Windows 5.27.03.0003 may allow a privileged user to potentially enable escalation of privilege via local access...
CVE-2022-36396
Improper access control in some IntelR Aptio V UEFI Firmware Integrator Tools before version iDmiEdit-Linux-5.27.06.0017 may allow a privileged user to potentially enable escalation of privilege via local access...