27640 matches found
CVE-2025-54509
Improper access control for register interface in the Input-Output Memory Management Unit IOMMU could allow a privileged attacker to cause non-coherent accesses by the AMD Secure Processor ASP, potentially resulting in loss of integrity...
CVE-2026-8863
CVE-2026-8863 affects multiple Microsoft-signed UEFI SHIM bootloaders and enables bypass of Secure Boot, allowing code execution before the OS loads. Root cause: vulnerable SHIM bootloaders; impact: bypass of Secure Boot and arbitrary code execution at boot. Remediation: block via a specific UEFI...
CVE-2026-8863 CVE-2026-8863
Multiple Microsoft-sigend UEFI SHIM bootloaders are vulnerable to SecureBoot bypass. An attacker with administrative privileges or the ability to modify the boot process could use one of the vulnerable shim bootloaders to bypass Secure Boot protections and execute arbitrary code before the...
CVE-2026-8863 CVE-2026-8863
Multiple Microsoft-sigend UEFI SHIM bootloaders are vulnerable to SecureBoot bypass. An attacker with administrative privileges or the ability to modify the boot process could use one of the vulnerable shim bootloaders to bypass Secure Boot protections and execute arbitrary code before the...
Malicious code in exodus-wallet-core (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53bf93b626689e980ef2e9c4ba33fd95e81d6a04c665f85908c8cf07b8b36e14 Package name impersonates the Exodus cryptocurrency wallet brand. package.json declares "postinstall": "node src/canary.js", and src/canary.js perfor...
MAL-2026-5441 Malicious code in exodus-secure-container (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92bc77b12251baa18392bd90e84d6bdc57aaef9a8c774f8cb29a0066e80f76b5 On npm install, the package runs node src/canary.js as a postinstall hook. That script performs a DNS lookup and HTTPS GET to the hardcoded host...
CVE-2025-54509
Improper access control for register interface in the Input-Output Memory Management Unit IOMMU could allow a privileged attacker to cause non-coherent accesses by the AMD Secure Processor ASP, potentially resulting in loss of integrity...
CVE-2025-54509
Improper access control for register interface in the Input-Output Memory Management Unit IOMMU could allow a privileged attacker to cause non-coherent accesses by the AMD Secure Processor ASP, potentially resulting in loss of integrity...
EUVD-2025-210086
Improper access control for register interface in the input-output memory management unit IOMMU could allow a privileged attacker to cause non-coherent accesses by the AMD secure processor ASP potentially resulting in loss of integrity...
CVE-2025-54509
Improper access control for register interface in the Input-Output Memory Management Unit IOMMU could allow a privileged attacker to cause non-coherent accesses by the AMD Secure Processor ASP, potentially resulting in loss of integrity...
CVE-2026-48578
Improper access control in Windows Secure Boot allows an authorized attacker to elevate privileges locally...
CVE-2026-48575
Protection mechanism failure in Windows Secure Boot allows an authorized attacker to bypass a security feature locally...
CVE-2026-48576
No cwe for this issue in Windows Secure Boot allows an authorized attacker to bypass a security feature locally...
CVE-2026-48573
No cwe for this issue in Windows Secure Boot allows an authorized attacker to bypass a security feature locally...
CVE-2026-48568
Protection mechanism failure in Windows Secure Boot allows an authorized attacker to bypass a security feature locally...
CVE-2026-48570
Protection mechanism failure in Windows Secure Boot allows an authorized attacker to bypass a security feature locally...
CVE-2026-45654
Improper access control in Windows Secure Boot allows an authorized attacker to bypass a security feature locally...
CVE-2026-45588
Protection mechanism failure in Windows Secure Boot allows an authorized attacker to bypass a security feature locally...