Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2024-38798

Опубликовано: 09 дек. 2025
Источник: ubuntu
Приоритет: medium

Описание

EDK2 contains a vulnerability in BIOS where an attacker may cause “Exposure of Sensitive Information to an Unauthorized Actor” by local access. Successful exploitation of this vulnerability will lead to possible information disclosure or escalation of privilege and impact Confidentiality.

РелизСтатусПримечание
devel

not-affected

2025.11-3ubuntu7
esm-apps-legacy/xenial

needs-triage

esm-apps/bionic

needs-triage

esm-apps/xenial

ignored

end of ESM support, was needs-triage
esm-infra/focal

needs-triage

jammy

needs-triage

noble

needs-triage

plucky

ignored

end of life, was needs-triage
questing

ignored

end of life, was needs-triage
resolute

needs-triage

Показывать по

Связанные уязвимости

CVSS3: 5.2
redhat
8 месяцев назад

EDK2 contains a vulnerability in BIOS where an attacker may cause “Exposure of Sensitive Information to an Unauthorized Actor” by local access. Successful exploitation of this vulnerability will lead to possible information disclosure or escalation of privilege and impact Confidentiality.

nvd
8 месяцев назад

EDK2 contains a vulnerability in BIOS where an attacker may cause “Exposure of Sensitive Information to an Unauthorized Actor” by local access. Successful exploitation of this vulnerability will lead to possible information disclosure or escalation of privilege and impact Confidentiality.

debian
8 месяцев назад

EDK2 contains a vulnerability in BIOS where an attacker may cause \u20 ...

github
8 месяцев назад

EDK2 contains a vulnerability in BIOS where an attacker may cause “Exposure of Sensitive Information to an Unauthorized Actor” by local access. Successful exploitation of this vulnerability will lead to possible information disclosure or escalation of privilege and impact Confidentiality.

CVSS3: 7
fstec
8 месяцев назад

Уязвимость среды с открытым исходным кодом для разработки UEFI EDK2, связанная с раскрытием информации, позволяющая нарушителю повысить свои привилегии и получить несанкционированный доступ к защищаемой информации