Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-q4rv-v64c-3hff

Опубликовано: 10 июн. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 8.2

Описание

An arbitrary write vulnerability in Microsoft signed UEFI firmware allows for code execution of untrusted software. This allows an attacker to control its value, leading to arbitrary memory writes, including modification of critical firmware settings stored in NVRAM. Exploiting this vulnerability could enable security bypasses, persistence mechanisms, or full system compromise.

An arbitrary write vulnerability in Microsoft signed UEFI firmware allows for code execution of untrusted software. This allows an attacker to control its value, leading to arbitrary memory writes, including modification of critical firmware settings stored in NVRAM. Exploiting this vulnerability could enable security bypasses, persistence mechanisms, or full system compromise.

EPSS

Процентиль: 2%
0.00016
Низкий

8.2 High

CVSS3

Связанные уязвимости

redhat
8 дней назад

An arbitrary write vulnerability in Microsoft signed UEFI firmware allows for code execution of untrusted software. This allows an attacker to control its value, leading to arbitrary memory writes, including modification of critical firmware settings stored in NVRAM. Exploiting this vulnerability could enable security bypasses, persistence mechanisms, or full system compromise.

CVSS3: 8.2
nvd
9 дней назад

An arbitrary write vulnerability in Microsoft signed UEFI firmware allows for code execution of untrusted software. This allows an attacker to control its value, leading to arbitrary memory writes, including modification of critical firmware settings stored in NVRAM. Exploiting this vulnerability could enable security bypasses, persistence mechanisms, or full system compromise.

CVSS3: 6.7
msrc
9 дней назад

Cert CC: CVE-2025-3052 InsydeH2O Secure Boot Bypass

CVSS3: 8.2
fstec
9 дней назад

Уязвимость реализации протокола безопасной загрузки Secure Boot операционной системы Windows, позволяющая нарушителю обойти существующие ограничения безопасности и выполнить произвольный код

EPSS

Процентиль: 2%
0.00016
Низкий

8.2 High

CVSS3