CVE-2023-28075

Dell BIOS TOCTOU vulnerability (CVE-2023-28075) allows a locally authenticated user with physical access to trigger a specifically timed DMA operation during an SMI to gain arbitrary code execution. Affected component is the Dell BIOS; root cause is a Time‑of‑check Time‑of‑use flaw enabling TOCTO...

CVE-2023-32453

Dell BIOS firmware on Dell systems contains an improper authentication vulnerability. A malicious user with physical access can potentially modify a security-critical UEFI variable without BIOS administrator knowledge, due to an authentication weakness in the BIOS/UEFI flow. CVSS details in the p...

CVE-2023-32475

Dell BIOS vulnerability CVE-2023-32475 stems from missing integrity check support in Dell BIOS. The issue could allow a physically proximate attacker to bypass security mechanisms and execute arbitrary code on the system. Affected software is Dell BIOS (embedded on the motherboard), with impact t...