242 matches found
EUVD-2022-35555
Malicious code in bioql PyPI...
EUVD-2023-31751
Malicious code in bioql PyPI...
EUVD-2023-31755
Malicious code in bioql PyPI...
EUVD-2023-36697
Malicious code in bioql PyPI...
CVE-2025-4275
CVE-2025-4275 affects InsydeH2O UEFI firmware/applications. Root cause: unsafe handling of an NVRAM variable used to store signing certificates, enabling a attacker to inject their own certificate and bypass Secure Boot. Impact: execution of unsigned or malicious UEFI code before OS load, potenti...
CVE-2025-4275 SecureFlashDxe: Incorrect UEFI variable attributes check allows usage of invalid certificate
A vulnerability in the digital signature verification process does not properly validate variable attributes which allows an attacker to bypass signature verification by creating a non-authenticated NVRAM variable. An attacker may to execute arbitrary signed UEFI code and bypass Secure Boot...
CVE-2025-4275 SecureFlashDxe: Incorrect UEFI variable attributes check allows usage of invalid certificate
A vulnerability in the digital signature verification process does not properly validate variable attributes which allows an attacker to bypass signature verification by creating a non-authenticated NVRAM variable. An attacker may to execute arbitrary signed UEFI code and bypass Secure Boot...
CVE-2023-28044
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentially exploit this vulnerability in order to modify a UEFI variable...
CVE-2023-27471
An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. UEFI implementations do not correctly protect and validate information contained in the 'MeSetup' UEFI variable. On some systems, this variable can be overwritten using operating system APIs. Exploitation of this vulnerabili...
CVE-2022-36337
An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. A stack buffer overflow vulnerability in the MebxConfiguration driver leads to arbitrary code execution. Control of a UEFI variable under the OS can cause this overflow when read by BIOS code...
CVE-2024-1598
Potential buffer overflow in unsafe UEFI variable handling in Phoenix SecureCoreā¢ for Intel Gemini Lake.This issue affects: SecureCoreā¢ for Intel Gemini Lake: from 4.1.0.1 before 4.1.0.567...
CVE-2024-0158
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with admin privileges may potentially exploit this vulnerability to modify a UEFI variable, leading to denial of service and escalation of privileges...
CVE-2024-0158
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with admin privileges may potentially exploit this vulnerability to modify a UEFI variable, leading to denial of service and escalation of privileges...
CVE-2024-0158
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with admin privileges may potentially exploit this vulnerability to modify a UEFI variable, leading to denial of service and escalation of privileges...
CVE-2024-0158: Improper Input Validation
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with admin privileges may potentially exploit this vulnerability to modify a UEFI variable, leading to denial of service and escalation of privileges...
CVE-2024-1598
Potential buffer overflow in unsafe UEFI variable handling in Phoenix SecureCoreā¢ for Intel Gemini Lake.This issue affects: SecureCoreā¢ for Intel Gemini Lake: from 4.1.0.1 before 4.1.0.567...
CVE-2024-0762
Potential buffer overflow in unsafe UEFI variable handling in Phoenix SecureCoreā¢ for select Intel platforms This issue affects: Phoenix SecureCoreā¢ for Intel Kaby Lake: from 4.0.1.1 before 4.0.1.998; Phoenix SecureCoreā¢ for Intel Coffee Lake: from 4.1.0.1 before 4.1.0.562; Phoenix SecureCoreā¢ fo...
CVE-2024-0762
CVE-2024-0762 affects Phoenix SecureCore UEFI firmware across Intel families (Kaby Lake through Meteor Lake) with a buffer overflow in unsafe UEFI variable handling that could allow local privilege escalation and firmware code execution. Affected Cisco? No, Phoenix SecureCore versions: Kaby Lake ...
CVE-2024-0762 Potential buffer overflow when handling UEFI variables
Potential buffer overflow in unsafe UEFI variable handling in Phoenix SecureCoreā¢ for select Intel platforms This issue affects: Phoenix SecureCoreā¢ for Intel Kaby Lake: from 4.0.1.1 before 4.0.1.998; Phoenix SecureCoreā¢ for Intel Coffee Lake: from 4.1.0.1 before 4.1.0.562; Phoenix SecureCoreā¢ fo...
CVE-2024-1598: Stack-based Buffer Overflow
Potential buffer overflow in unsafe UEFI variable handling in Phoenix SecureCoreā¢ for Intel Gemini Lake.This issue affects: SecureCoreā¢ for Intel Gemini Lake: from 4.1.0.1 before 4.1.0.567...