2472 matches found
CVE-2021-39299
CVE-2021-39299 concerns UEFI firmware (BIOS) in some HP notebook/desktop platforms. The vulnerability could allow escalation of privilege and arbitrary code execution via the firmware. HP has released security updates (HPSBHF03765) with minimum mitigated versions for affected platforms. Other con...
CVE-2021-39300
Potential vulnerabilities have been identified in UEFI firmware BIOS for some PC products which may allow escalation of privilege and arbitrary code execution...
CVE-2021-39299
Potential vulnerabilities have been identified in UEFI firmware BIOS for some PC products which may allow escalation of privilege and arbitrary code execution...
CVE-2021-39301
Potential vulnerabilities have been identified in UEFI firmware BIOS for some PC products which may allow escalation of privilege and arbitrary code execution...
CVE-2021-39301
CVE-2021-39301 (UEFI firmware/BIOS) describes a vulnerability in UEFI firmware on some PC products that could enable local privilege escalation and arbitrary code execution. The connected documents corroborate this as a firmware-level issue with root cause in the UEFI/BIOS layer and list HP UEFI ...
CVE-2021-39297
Potential vulnerabilities have been identified in UEFI firmware BIOS for some PC products which may allow escalation of privilege and arbitrary code execution...
CVE-2021-39297
Technical details (affected products, vulnerable components, exploitability, and remediation specifics) are not publicly available in the provided documents; monitor for updates.
CVE-2021-39298
A potential vulnerability in AMD System Management Mode SMM interrupt handler may allow an attacker with high privileges to access the SMM resulting in arbitrary code execution which could be used by malicious actors to bypass security mechanisms provided in the UEFI firmware...
CVE-2021-39298
CVE-2021-39298 concerns AMD SMM (System Management Mode) interrupt handler. The AMD AMD-SB-1027/AMD-SB-1032 entries describe a vulnerability where a highly-privileged adversary could access SMM and achieve arbitrary code execution, potentially bypassing UEFI firmware security measures. Affected c...
AMD System Management Mode 安全漏洞
AMD System Management Mode is a system management mode from AMD in the United States. A CPU execution mode. A security vulnerability exists in the AMD System Management Mode UEFI firmware that could allow an attacker to perform privilege escalation and arbitrary code execution...
CVE-2021-33115
Improper input validation for some IntelR PROSet/Wireless WiFi in UEFI may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access...
CVE-2021-33115
Improper input validation for some IntelR PROSet/Wireless WiFi in UEFI may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access...
CVE-2021-33115
Improper input validation for some IntelR PROSet/Wireless WiFi in UEFI may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access...
UBUNTU-CVE-2021-33115
Improper input validation for some IntelR PROSet/Wireless WiFi in UEFI may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access...
CVE-2021-33115
Improper input validation for some IntelR PROSet/Wireless WiFi in UEFI may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access...
CVE-2021-33115
CVE-2021-33115 involves improper input validation in Intel PROSet/Wireless WiFi (UEFI) that could allow an unauthenticated attacker with adjacent access to escalate privileges. The connected Intel advisory lists affected products (Intel PROSet/Wireless WiFi and Killer WiFi) and provides mitigatio...
Insyde InsydeH2O permission permission and access control issues vulnerability (CNVD-2022-10278)
Insyde InsydeH2O is a C source from Insyde Software Taiwan, China that implements the new technology "EFI/UEFI" specification, designed to replace the traditional BIOS Basic Input/Output System. Operating System H2O UEFI firmware is vulnerable to permission and access control issues, which can be...
Insyde InsydeH2O has an unspecified vulnerability (CNVD-2022-10279)
Insyde InsydeH2O is a C source from Insyde Software Taiwan, China that implements the new technology "EFI/UEFI" specification, designed to replace the traditional BIOS Basic Input/Output System. Operating System H2O UEFI firmware contains a security vulnerability that can be exploited by attacker...
Insyde InsydeH2O Buffer Overflow Vulnerability (CNVD-2022-10275)
Insyde InsydeH2O is a C source from Insyde Software Taiwan, China that implements the new technology "EFI/UEFI" specification, designed to replace the legacy BIOS Basic Input/Output System. Operating System H2O UEFI firmware has a buffer overflow vulnerability that can be exploited to write fixed...
Insyde InsydeH2O Buffer Overflow Vulnerability (CNVD-2022-10273)
Insyde InsydeH2O is a C source from Insyde Software Taiwan, China that implements the new technology "EFI/UEFI" specification, designed to replace the legacy BIOS Basic Input/Output System. Operating System H2O UEFI firmware has a buffer overflow vulnerability that can be exploited to write fixed...