CVE-2021-39298

CVE-2021-39298 concerns AMD SMM (System Management Mode) interrupt handler. The AMD AMD-SB-1027/AMD-SB-1032 entries describe a vulnerability where a highly-privileged adversary could access SMM and achieve arbitrary code execution, potentially bypassing UEFI firmware security measures. Affected c...

CVE-2021-39300

Summary of CVE-2021-39300 (CVE record and linked sources): The issue concerns potential vulnerabilities in UEFI firmware (BIOS) for some HP PC products that may allow local privilege escalation and arbitrary code execution. The vulnerability is rooted in the UEFI firmware/BIOS itself, with impact...

CVE-2021-39301

CVE-2021-39301 (UEFI firmware/BIOS) describes a vulnerability in UEFI firmware on some PC products that could enable local privilege escalation and arbitrary code execution. The connected documents corroborate this as a firmware-level issue with root cause in the UEFI/BIOS layer and list HP UEFI ...

CVE-2021-39299

CVE-2021-39299 concerns UEFI firmware (BIOS) in some HP notebook/desktop platforms. The vulnerability could allow escalation of privilege and arbitrary code execution via the firmware. HP has released security updates (HPSBHF03765) with minimum mitigated versions for affected platforms. Other con...

CVE-2021-39297

Technical details (affected products, vulnerable components, exploitability, and remediation specifics) are not publicly available in the provided documents; monitor for updates.

CVE-2022-31640

CVE-2022-31640 concerns HP PC BIOS firmware with a vulnerability in the System Management Mode (SMM) related to improper input validation. Affected product scope is HP PC BIOS, with risk described as possible arbitrary code execution, privilege escalation, denial of service, and information discl...

CVE-2022-31642

CVE-2022-31642 corresponds to HP PC BIOS vulnerabilities where synchronization errors in the System Management Mode (SMM) of HP laptop BIOS firmware could allow arbitrary code execution, privilege escalation, denial of service, and information disclosure. Affected software is HP PC BIOS; the root...

CVE-2022-31641

CVE-2022-31641 affects HP PC BIOS firmware, with a vulnerability in System Management Mode (SMM) that could enable arbitrary code execution, privilege escalation, denial of service, and information disclosure on affected HP notebooks. Affected product scope is HP PC BIOS; root cause described as ...

CVE-2022-27537

CVE-2022-27537 concerns HP PC BIOS vulnerabilities that could enable arbitrary code execution, privilege escalation, denial of service, and information disclosure. Connected sources indicate the issue affects HP system BIOS with mitigations in BIOS updates; HP documents list affected platforms an...

CVE-2022-31645

CVE-2022-31645 is described as a BIOS/SMM vulnerability affecting HP PC products, with potential for arbitrary code execution, privilege escalation, DoS, and information disclosure. Connected sources indicate root cause as memory corruption/out-of-bounds write in the System Management Mode (SMM) ...

CVE-2022-31644

CVE-2022-31644 affects HP PC BIOS firmware, with a root cause described as an SMM/UEFI vulnerability leading to memory corruption (out-of-bounds write) that could permit arbitrary code execution, privilege escalation, DoS, or information disclosure. HP has released mitigations via BIOS updates (m...

CVE-2022-31646

CVE-2022-31646 concerns a vulnerability in the system BIOS of certain HP PC products. The affected component is the BIOS/firmware, with HP noting potential arbitrary code execution, privilege escalation, denial of service, and information disclosure. The CVE is referenced across multiple feeds (N...