103 matches found
GIGABYTE-H510M-K-V2-BIOS-SMM-Reverse-Engineering-CVE-2025-7026-7027-7028-7029-Research
Investigación de ingeniería inversa SMM del BIOS GIGABYTE H510M K V2 y CVE-2025-7026/7027/7028/7029 Ingeniería inversa estática de una imagen de BIOS GIGABYTE H510M K V2 H510MKV2.F3: extracción completa de volúmenes de firmware UEFI, análisis del asignador de memoria del núcleo SMM de la...
AlmaLinux 10 : microcode_ctl (ALSA-2026:67979)
The remote AlmaLinux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the ALSA-2026:67979 advisory. kernel: hypervisor: Intel Processors: Privilege escalation in Ring 0 via improper value handling CVE-2025-35973 kernel: microcodectl: Intel Xeon 6...
kernel: microcode_ctl: Intel Xeon 6 Processors: Privilege escalation via improper memory range handling in SMM
A flaw was found in IntelR XeonR 6 processors when using IntelR TDX within System Management Mode SMM. Improper handling of overlap between protected memory ranges may allow a local attacker with privileged user access to escalate privileges. This vulnerability could lead to high impact on...
Linux Distros Unpatched Vulnerability : CVE-2026-0438
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A System Management Mode SMM handler could perform a callout to code located in non-SMM/untrusted memory. A highly privileged attacker could, with active user...
CVE-2025-0012: Improper Handling of Overlap Between Protected Memory Ranges
Improper handling of overlap between the segmented reverse map table RMP and system management mode SMM memory could allow a privileged attacker corrupt or partially infer SMM memory resulting in loss of integrity or confidentiality...
AMD EPYC 安全漏洞
The AMD EPYC is a high-performance server processor developed by American semiconductor company AMD. There are security vulnerabilities in the AMD EPYC™ 9005 Series Processors and the AMD EPYC™ Embedded 9005 Series Processors. These vulnerabilities stem from improper handling of the segmentation...
CVE-2022-35896
An issue SMM memory leak vulnerability in SMM driver SMRAM was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. An attacker can dump SMRAM contents via the software SMI provided by the FvbServicesRuntimeDxe driver to read the contents of SMRAM, leading to information disclosure...
CVE-2022-35893
An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. An SMM memory corruption vulnerability in the FvbServicesRuntimeDxe driver allows an attacker to write fixed or predictable data to SMRAM. Exploiting this issue could lead to escalating privileges to SMM...
Insyde InsydeH2O 安全漏洞
Insyde InsydeH2O is a new EFI/UEFI specification from Insyde China. It is intended to replace the traditional BIOS Basic Input/Output System. A security vulnerability exists in Insyde InsydeH2O, which stems from unchecked output buffers and could lead to arbitrary code execution and SMM memory...
CVE-2025-10451: Out-of-bounds Write
Unchecked output buffer may allowed arbitrary code execution in SMM and potentially result in SMM memory corruption...
EUVD-2022-38769
Malicious code in bioql PyPI...
EUVD-2021-30529
Malicious code in bioql PyPI...
EUVD-2023-57336
Malicious code in bioql PyPI...
EUVD-2022-43452
Malicious code in bioql PyPI...
EUVD-2023-26749
Malicious code in bioql PyPI...
EUVD-2022-38766
Malicious code in bioql PyPI...
EUVD-2022-43454
Malicious code in bioql PyPI...
EUVD-2022-28946
Malicious code in bioql PyPI...