| CVE-2026-97876 |
A local attacker with control over GRUB's configuration can bypass lockdown restrictions when booting with Secure Boot…
|
6.4
Medium
|
Oct 2, 2026 |
| CVE-2025-54770 |
Grub2: use-after-free in net_set_vlan
|
4.9
Medium
|
Nov 18, 2025 |
| CVE-2025-61664 |
Grub2: missing unregister call for normal_exit command may lead to use-after-free
|
4.9
Medium
|
Nov 18, 2025 |
| CVE-2025-61663 |
Grub2: missing unregister call for normal commands may lead to use-after-free
|
4.9
Medium
|
Nov 18, 2025 |
| CVE-2025-61662 |
A Use-After-Free vulnerability has been discovered in GRUB's gettext module
|
7.8
High
|
Nov 18, 2025 |
| CVE-2025-61661 |
Grub2: grub2: out-of-bounds write via malicious usb device
|
4.8
Medium
|
Nov 18, 2025 |
| CVE-2025-54771 |
Grub2: use-after-free in grub_file_close()
|
4.9
Medium
|
Nov 18, 2025 |
| CVE-2024-56738 |
GNU GRUB (aka GRUB2) through 2.12 does not use a constant-time algorithm for grub_crypto_memcmp and thus allows…
|
5.3
Medium
|
Dec 29, 2024 |
| CVE-2024-56737 |
GNU GRUB (aka GRUB2) through 2.12 has a heap-based buffer overflow in fs/hfs.c via crafted sblock data in an HFS…
|
8.8
High
|
Dec 29, 2024 |
| CVE-2024-2312 |
GRUB2 does not call the module fini functions on exit, leading to Debian/Ubuntu's peimage GRUB2 module leaving UEFI…
|
6.7
Medium
|
Apr 5, 2024 |