Where
-Infinity
0

Trending

Last week
Last month
Last year

GNU GRUB2grub2 allows bypassing TPM-bound disk encryption on SL(E)M encrypted Images

Risk 49
Severity
7
EPSS
0.04%
First published (updated )
CVE-2024-49504

CVE-2023-4692, CVE-2023-4693: grub2: OOB write, read via specially crafted NTFS filesystem

First published (updated )
https://seclists.org/oss-sec/2023/q4/40

Fedoraproject FedoraGrub2: bypass the grub password protection feature

Risk 62
Severity
6.8
First published (updated )
CVE-2023-4001

debian/grub2GRUB2 grub.cfg configuration file is created with the wrong permission (0644) allowing unprivileged …

Risk 18
Severity
3.3
First published (updated )
CVE-2021-3981

GNU GRUB2GRUB2 grub.cfg configuration file is created with the wrong permission (0644) allowing unprivileged …

Risk 5
Severity
1
First published (updated )
REDHAT-BUG-2024170
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

redhat/grub2A flaw was found in grub2 when handling JPEG images. This flaw allows an attacker to craft a malicio…

Risk 61
Severity
7.5
First published (updated )
CVE-2021-3697

redhat/grub2A flaw was found in grub2 when handling a PNG image header. When decoding the data contained in the …

Risk 61
Severity
6.9
First published (updated )
CVE-2021-3696

redhat/grub2A flaw was found in grub 2, where a crafted 16-bit grayscale PNG image may lead to an out-of-bounds …

Risk 61
Severity
7.5
First published (updated )
CVE-2021-3695

redhat Enterprise Linux Server AusThe grub2's cutmem command does not honor secure boot locking. This allows an privileged attacker to…

Risk 59
Severity
7.5
First published (updated )
CVE-2020-27779

redhat Enterprise Linux Server Ausgrub_parser_split_cmdline expands variable names present in the supplied command line in to their co…

Risk 63
Severity
7.2
First published (updated )
CVE-2020-27749
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

redhat Enterprise Linux Server AusA flaw was found in grub2 in versions prior to 2.06. During USB device initialization, descriptors a…

Risk 64
Severity
7.6
First published (updated )
CVE-2020-25647

redhat Enterprise Linux Server AusUse After Free

Risk 64
Severity
8.2
First published (updated )
CVE-2020-25632

redhat Enterprise Linux Server AusGRUB2 enables the use of the command acpi even when secure boot is signaled by the firmware. An atta…

Risk 59
Severity
7.5
First published (updated )
CVE-2020-14372

Hello All, Tavis Ormandy reported a flaw in grub2-set-bootflag utility of grub2. grub-set-bootflag…

First published (updated )
https://seclists.org/oss-sec/2019/q4/101

GNU GRUB2A flaw was found in the grub2-set-bootflag utility of grub2. When the utility is run under resource …

Risk 19
Severity
4
First published (updated )
REDHAT-BUG-1764925
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

GNU GRUB2A flaw was found in the grub2-set-bootflag utility of grub2. When the utility is run under resource …

Risk 35
Severity
5.9
First published (updated )
CVE-2019-14865

CentOS Grub2-pc-modulesInteger Underflow

Risk 67
Severity
7.4
First published (updated )
CVE-2015-8370

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203