EUVD-2022-43548

Malicious code in bioql PyPI...

EUVD-2023-54543

Malicious code in bioql PyPI...

EUVD-2023-31767

Malicious code in bioql PyPI...

EUVD-2025-13637

Malicious code in bioql PyPI...

EUVD-2023-35102

Malicious code in bioql PyPI...

EUVD-2023-52766

Malicious code in bioql PyPI...

EUVD-2021-6865

Malicious code in bioql PyPI...

EUVD-2023-26468

Malicious code in bioql PyPI...

EUVD-2021-8845

Malicious code in bioql PyPI...

EUVD-2025-14552

Malicious code in bioql PyPI...

EUVD-2023-38294

Malicious code in bioql PyPI...

EUVD-2023-31759

Malicious code in bioql PyPI...

EUVD-2024-38704

Malicious code in bioql PyPI...

EUVD-2023-43648

Malicious code in bioql PyPI...

New HybridPetya Ransomware Bypasses UEFI Secure Boot With CVE-2024-7344 Exploit

Cybersecurity researchers have discovered a new ransomware strain dubbed HybridPetya that resembles the notorious Petya/NotPetya malware, while also incorporating the ability to bypass the Secure Boot mechanism in Unified Extensible Firmware Interface UEFI systems using a now-patched vulnerabilit...

QEMU 安全漏洞

QEMU Quick Emulator is a suite of simulation processor software by Fabrice Bellard, an individual developer in France. The software is fast and cross-platform. QEMU suffers from a security vulnerability that stems from the fact that an attacker can bypass access restrictions via uefi-vars, which...

A heap overflow in LzmaUefiDecompressGetInfo function in EDK II.

...

QEMU uefi-vars Uninitialized Memory Information Disclosure Vulnerability

This vulnerability allows local attackers to disclose sensitive information on affected installations of QEMU. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists within the uefi-vars...

GRUB2 does not call the module fini functions on exit, leading to Debian/Ubuntu's peimage GRUB2 module leaving UEFI system table hooks after exit. This lead to a use-after-free condition, and could possibly lead to secure boot bypass.

...

Linux Distros Unpatched Vulnerability : CVE-2025-8860

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in QEMU in the uefi-vars virtual device. When the guest writes to register UEFIVARSREGBUFFERSIZE, the .write callback uefivarswrite is invoked...