Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 7,458

Export CSV
CVE-2023-24023

kernel: Bluetooth Forward and Future Secrecy Attacks and Defenses

Bluetooth BR/EDR devices with Secure Simple Pairing and Secure Connections pairing in Bluetooth Core Specification 4.2 through 5.4 allow certain man-in-the-middle attacks that force a short key length, and might lead to discovery of the encryption key and live injection, aka BLUFFS.

CVSS 3.1 · 6.4 Medium EPSS 1.3% KEV · Not listed
Vendors
Bluetooth Microsoft Redhat
Products
Bluetooth Core Specification Windows 10 1809 Windows 10 21h2 and 8 more
CVE-2023-20569

amd: Return Address Predictor vulnerability leading to information disclosure

A side channel vulnerability on some of the AMD CPUs may allow an attacker to influence the return address prediction. This may result in speculative execution at an attacker-controlled address, potentially leading to information disclosure.

CVSS 3.1 · 4.7 Medium EPSS 7.3% KEV · Not listed
Vendors
Amd Debian Fedoraproject and 2 more
Products
Epyc 72f3 Epyc 72f3 Firmware Epyc 7313 and 299 more
CVE-2022-34303

shim: 3rd party shim allow secure boot bypass

A flaw was found in Eurosoft bootloaders before 2022-06-01. An attacker may use this bootloader to bypass or tamper with Secure Boot protections. In order to load and execute arbitrary code in the pre-boot stage, an attacker simply needs to replace the existing signed bootloader currently in use with this bootloader. Access to the EFI System Partition is required for booting using external media.

CVSS 3.1 · 6.7 Medium EPSS < 1% KEV · Not listed
Vendors
Eurosoft-uk Microsoft Redhat
Products
Uefi Bootloader Windows 10 Windows 11 and 7 more
CVE-2022-34302

shim: 3rd party shim allow secure boot bypass

A flaw was found in New Horizon Datasys bootloaders before 2022-06-01. An attacker may use this bootloader to bypass or tamper with Secure Boot protections. In order to load and execute arbitrary code in the pre-boot stage, an attacker simply needs to replace the existing signed bootloader currently in use with this bootloader. Access to the EFI System Partition is required for booting using external media.

CVSS 3.1 · 6.7 Medium EPSS 1.1% KEV · Not listed
Vendors
Horizondatasys Microsoft Redhat
Products
Uefi Bootloader Windows 10 Windows 11 and 7 more
CVE-2022-34301

shim: 3rd party shim allow secure boot bypass

A flaw was found in CryptoPro Secure Disk bootloaders before 2022-06-01. An attacker may use this bootloader to bypass or tamper with Secure Boot protections. In order to load and execute arbitrary code in the pre-boot stage, an attacker simply needs to replace the existing signed bootloader currently in use with this bootloader. Access to the EFI System Partition is required for booting using external media.

CVSS 3.1 · 6.7 Medium EPSS < 1% KEV · Not listed
Vendors
Kidan Microsoft Redhat
Products
Cryptopro Securedisk For Bitlocker Windows 10 Windows 11 and 7 more
CVE-2022-32230

SMBv3 FileNormalizedNameInformation NULL Pointer Dereference

Microsoft Windows SMBv3 suffers from a null pointer dereference in versions of Windows prior to the April, 2022 patch set. By sending a malformed FileNormalizedNameInformation SMBv3 request over a named pipe, an attacker can cause a Blue Screen of Death (BSOD) crash of the Windows kernel. For most systems, this attack requires authentication, except in the special case of Windows Domain Controllers, where unauthenticated users can always open named pipes as long as they can establish an SMB session. Typically, after the BSOD, the victim SMBv3 server will reboot.

CVSS 3.1 · 7.5 High EPSS 7.9% KEV · Not listed
Vendors
Microsoft
Products
Windows 10 Windows 11 Windows Server 2019