5788 matches found
CVE-2023-5410
A potential security vulnerability has been reported in the system BIOS of certain HP PC products, which might allow memory tampering. HP is releasing mitigation for the potential vulnerability...
CVE-2023-5078
A vulnerability was reported in some ThinkPad BIOS that could allow a physical or local attacker with elevated privileges to tamper with BIOS firmware...
CVE-2023-40220
Improper buffer restrictions in some IntelR NUC BIOS firmware may allow a privileged user to potentially enable information disclosure via local access...
CVE-2023-39535
AMI AptioV contains a vulnerability in BIOS where an Attacker may use an improper input validation via the local network. A successful exploit of this vulnerability may lead to a loss of confidentiality, integrity and availability...
CVE-2023-39536
AMI AptioV contains a vulnerability in BIOS where an Attacker may use an improper input validation via the local network. A successful exploit of this vulnerability may lead to a loss of confidentiality, integrity and availability...
CVE-2023-52548
Huawei Matebook D16Model: CREM-WXX9, BIOS: v2.26 Arbitrary Memory Corruption in SMI Handler of ThisiServicesSmm SMM module. This can be leveraged by a malicious OS attacker to corrupt arbitrary SMRAM memory and, in turn, lead to code execution in SMM...
CVE-2023-34438
Race condition in some IntelR NUC BIOS firmware may allow a privileged user to potentially enable escalation of privilege via local access...
CVE-2023-34431
Improper input validation in some IntelR Server Board BIOS firmware may allow a privileged user to potentially enable escalation of privilege via local access...
CVE-2023-34349
Race condition in some IntelR NUC BIOS firmware may allow a privileged user to potentially enable escalation of privilege via local access...
CVE-2023-30768
Improper access control in the IntelR Server Board S2600WTT belonging to the IntelR Server Board S2600WT Family with the BIOS version 0016 may allow a privileged user to potentially enable escalation of privilege via local access...
CVE-2023-29500
Exposure of sensitive information to an unauthorized actor in BIOS firmware for some IntelR NUCs may allow a privilege user to potentially enable information disclosure via local access...
CVE-2023-28402
Improper input validation in some IntelR BIOS Guard firmware may allow a privileged user to potentially enable escalation of privilege via local access...
CVE-2023-28383
Improper conditions check in some IntelR BIOS PPAM firmware may allow a privileged user to potentially enable escalation of privilege via local access...
CVE-2023-27887
Improper initialization in BIOS firmware for some IntelR NUCs may allow a privileged user to potentially enable information disclosure via local access...
CVE-2023-27504
Improper conditions check in some IntelR BIOS Guard firmware may allow a privileged user to potentially enable escalation of privilege via local access...
CVE-2023-25756
Out-of-bounds read in the BIOS firmware for some IntelR Processors may allow an authenticated user to potentially enable escalation of privilege via adjacent access...
CVE-2023-34086
Improper input validation in some IntelR NUC BIOS firmware may allow a privileged user to potentially enable escalation of privilege via local access...
CVE-2023-25494
A potential vulnerability were reported in the BIOS of some Desktop, Smart Edge, and ThinkStation products that could allow a local attacker with elevated privileges to write to NVRAM variables...
CVE-2023-22614
An issue was discovered in ChipsetSvcSmm in Insyde InsydeH2O with kernel 5.0 through 5.5. There is insufficient input validation in BIOS Guard updates. An attacker can induce memory corruption in SMM by supplying malformed inputs to the BIOS Guard SMI handler...