TrickBot Returns with a Vengeance, Sporting Rare Bootkit Functions

The TrickBot malware has morphed once again, this time implementing functionality designed to inspect the UEFI/BIOS firmware of targeted systems. It marks a serious resurgence following an October takedown of the malware’s infrastructure by Microsoft and others. The Windows Unified Extensible...

TrickBot Malware Gets UEFI/BIOS Bootkit Feature to Remain Undetected

TrickBot, one of the most notorious and adaptable malware botnets in the world, is expanding its toolset to set its sights on firmware vulnerabilities to potentially deploy bootkits and take complete control of an infected system. The new functionality, dubbed "TrickBoot" by Advanced Intelligence...

VulnCheck KEV: CVE-2018-7445

In MikroTik RouterOS, a stack-based buffer overflow occurs when processing NetBIOS session request messages. Remote attackers with access to the service can exploit this vulnerability and gain code execution on the system...

Vulnerability of Intel processor BIOS microprogramming software, allowing attackers to enhance their privileges

The vulnerability of Intel processor BIOS microprogramming software is related to access control deficiencies. Exploiting this vulnerability can allow attackers to enhance their privileges...

CVE-2020-8764

Improper access control in BIOS firmware for some IntelR Processors may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2020-8739

Use of potentially dangerous function in Intel BIOS platform sample code for some IntelR Processors may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2020-8740

Out of bounds write in Intel BIOS platform sample code for some IntelR Processors may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2020-8738

Improper conditions check in Intel BIOS platform sample code for some IntelR Processors before may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2020-0590

Improper input validation in BIOS firmware for some IntelR Processors may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2020-0588

Improper conditions check in BIOS firmware for some IntelR Processors may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2020-0593

Improper buffer restrictions in BIOS firmware for some IntelR Processors may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2020-0590

Improper input validation in BIOS firmware for some IntelR Processors may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2020-0592

Out of bounds write in BIOS firmware for some IntelR Processors may allow an authenticated user to potentially enable escalation of privilege and/or denial of service via local access...

CVE-2020-0587

Improper conditions check in BIOS firmware for some IntelR Processors may allow a privileged user to potentially enable escalation of privilege via local access...

Input validation

Improper conditions check in BIOS firmware for some IntelR Processors may allow a privileged user to potentially enable escalation of privilege via local access...

Improper access control

Improper access control in BIOS firmware for some IntelR Processors may allow a privileged user to potentially enable escalation of privilege via local access...

Cross site scripting

Out of bounds write in Intel BIOS platform sample code for some IntelR Processors may allow a privileged user to potentially enable escalation of privilege via local access...

Input validation

Improper conditions check in BIOS firmware for some IntelR Processors may allow a privileged user to potentially enable escalation of privilege via local access...

Privilege escalation

Use of potentially dangerous function in Intel BIOS platform sample code for some IntelR Processors may allow an authenticated user to potentially enable escalation of privilege via local access...

Input validation

Improper conditions check in Intel BIOS platform sample code for some IntelR Processors before may allow a privileged user to potentially enable escalation of privilege via local access...