HPESBHF05107 rev.2 - HPE ProLiant DL/ML/XD/XL, Alletra, Apollo, Edgeline, and Synergy Server Using Certain Intel Processors, INTEL-SA-01437, Intel UEFI Firmware Advisory, Disclosure of Information Vulnerability

Potential Security Impact: Local: Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Alletra Storage Server 4210 - Prior to BIOS v1.8005-292026 HPE ProLiant Compute DL110 Gen12 - Prior to BIOS v1.8005-292026 HPE ProLiant Compute DL320 Gen12 - Prior to BI...

2026.3 IPU, Intel® UEFI Firmware Advisory

Summary: A potential security vulnerability for some Intel® UEFI Reference BIOS may allow information disclosure. Intel is releasing firmware updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2026-20712 Description: Incomplete cleanup in some UEFI firmware for so...

PT-2026-70801

Incomplete cleanup in some UEFI firmware for some IntelR reference platforms within UEFI may allow an information disclosure. System software adversary with a privileged user combined with a low complexity attack may enable data exposure. This result may potentially occur via local access when...

PT-2026-70335

Integer overflow in the UEFI firmware for the IntelR Slim Bootloader may allow an information disclosure. System software adversary with an authenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via local access when attack...

Linux Distros Unpatched Vulnerability : CVE-2026-19411

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A NULL pointer vulnerability has been found in the the shim application of dp.c library. A missing NULL pointer could allow attackers to perform a denial of...

Intel® Slim Bootloader Advisory

Summary: Potential security vulnerabilities in the Intel® Slim Bootloader may allow denial of service or information disclosure. Intel is releasing firmware updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2026-28729 Description: Integer overflow in the UEFI...

CVE-2026-19411

A NULL pointer vulnerability has been found in the the shim application of dp.c library. A missing NULL pointer could allow attackers to perform a denial of service attack on a system that uses shim application for UEFI bootloader...

AZL-95634 CVE-2026-19411 affecting package shim-unsigned-aarch64 16.1-2

A NULL pointer vulnerability has been found in the the shim application of dp.c library. A missing NULL pointer could allow attackers to perform a denial of service attack on a system that uses shim application for UEFI bootloader...

DEBIAN-CVE-2026-19411

A NULL pointer vulnerability has been found in the the shim application of dp.c library. A missing NULL pointer could allow attackers to perform a denial of service attack on a system that uses shim application for UEFI bootloader...

AZL-95637 CVE-2026-19411 affecting package shim-unsigned-x64 16.1-2

A NULL pointer vulnerability has been found in the the shim application of dp.c library. A missing NULL pointer could allow attackers to perform a denial of service attack on a system that uses shim application for UEFI bootloader...

CVE-2026-19411

A NULL pointer vulnerability has been found in the the shim application of dp.c library. A missing NULL pointer could allow attackers to perform a denial of service attack on a system that uses shim application for UEFI bootloader...

UBUNTU-CVE-2026-19411

A NULL pointer vulnerability has been found in the the shim application of dp.c library. A missing NULL pointer could allow attackers to perform a denial of service attack on a system that uses shim application for UEFI bootloader...

CVE-2026-19411

The CVE-2026-19411 entry describes a NULL pointer dereference in the shim application of the dp.c library. The vulnerability occurs in the function is_removable_media_path() when devicepathtostr() returns NULL, potentially allowing a denial of service on systems that rely on the shim for the UEFI...

EUVD-2026-55827

A NULL pointer vulnerability has been found in the the shim application of dp.c library. A missing NULL pointer could allow attackers to perform a denial of service attack on a system that uses shim application for UEFI bootloader...

CVE-2026-19411

A NULL pointer vulnerability has been found in the the shim application of dp.c library. A missing NULL pointer could allow attackers to perform a denial of service attack on a system that uses shim application for UEFI bootloader...

CVE-2026-19411

A NULL pointer vulnerability has been found in the the shim application of dp.c library. A missing NULL pointer could allow attackers to perform a denial of service attack on a system that uses shim application for UEFI bootloader...

CVE-2026-19411 Shim/dp.c library: null-pointer dereference in is_removable_media_path() when devicepathtostr() returns null

A NULL pointer vulnerability has been found in the the shim application of dp.c library. A missing NULL pointer could allow attackers to perform a denial of service attack on a system that uses shim application for UEFI bootloader...

CVE-2026-19411

A NULL pointer vulnerability has been found in the the shim application of dp.c library. A missing NULL pointer could allow attackers to perform a denial of service attack on a system that uses shim application for UEFI bootloader. Mitigation The code could be modified to include NULL pointer...

PT-2026-69969

Name of the Vulnerable Software and Affected Versions shim application affected versions not specified Description A NULL pointer vulnerability exists in the dp.c library of the shim application. This issue occurs due to a missing NULL pointer check, which could allow an attacker to cause a denia...

RLSA-2026:39297 Moderate: edk2 security, bug fix, and enhancement update

EDK Embedded Development Kit is a project to enable UEFI support for Virtual Machines. This package contains a sample 64-bit UEFI firmware for QEMU and KVM. Security Fixes: openssl: openssl: Information Disclosure from Uninitialized Memory via Invalid RSA Public Key CVE-2026-31790 openssl: OpenSS...