Mickey Shkatov

A security-feature bypass allows attackers to affect the system. A Microsoft-signed third-party bootloader completely skips signature verification when loading drivers, which enables a Secure Boot bypass on most Windows systems.

The issue allows an unauthenticated local attacker with physical access to the system and knowledge of the system configuration to potentially exploit it and read system information via debug interfaces.

A flaw was found in Eurosoft bootloaders that allows an attacker to bypass or tamper with Secure Boot protections. To load and execute arbitrary code in the pre-boot stage, an attacker needs to replace the existing signed bootloader with this bootloader, requiring access to the EFI System Partition for booting using external media. Additionally, there is a security-feature bypass vulnerability that allows attackers to affect the system. A related issue concerns errors in security settings of the Crypto Pro bootloader in Windows, which can be exploited to bypass security restrictions and gain unauthorized access to the system.

A flaw was found in the bootloaders, allowing an attacker to bypass or tamper with Secure Boot protections. To load and execute arbitrary code in the pre-boot stage, an attacker needs to replace the existing signed bootloader with this one, requiring access to the EFI System Partition for booting using external media. The vulnerability is related to errors in security settings, which can be exploited to bypass existing security restrictions.

A flaw was found in the bootloaders, allowing an attacker to bypass or tamper with Secure Boot protections. To load and execute arbitrary code in the pre-boot stage, an attacker needs to replace the existing signed bootloader with this one, requiring access to the EFI System Partition for booting using external media. The vulnerability is related to errors in security settings, which can be exploited to bypass existing security restrictions.

The issue is related to the implementation of Intel(R) Boot Guard and Intel(R) TXT technologies in Intel(R) processors, which may allow an unauthenticated user to potentially enable escalation of privilege via physical access. This is due to incorrect handling of parameters in the hardware debug modes and processor INIT setting, allowing override of locks.

The issue is related to errors in the Windows Certificate authentication procedure, allowing an attacker to conduct spoofing attacks. It is associated with data substitution, enabling malicious actors to impact the system.

The Dell BIOSConnect feature contains a buffer overflow issue. An authenticated malicious admin user with local access to the system may potentially exploit this to run arbitrary code and bypass UEFI restrictions.

The Dell BIOSConnect feature contains a buffer overflow issue. An authenticated malicious admin user with local access to the system may potentially exploit this to run arbitrary code and bypass UEFI restrictions.

The Dell BIOSConnect feature contains a buffer overflow issue. An authenticated malicious admin user with local access to the system may potentially exploit this to run arbitrary code and bypass UEFI restrictions.

A flaw was found in GRUB2 that allows an attacker to hijack and tamper with the GRUB verification process, bypassing Secure Boot protections. This can be exploited to load an untrusted or modified kernel, potentially leading to arbitrary code execution within GRUB. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability. An attacker would first need to establish access to the system, such as gaining physical access or obtaining remote access to a networked system with root access. With this access, an attacker could craft a string to cause a buffer overflow by injecting a malicious payload.

The issue allows low-privileged users to interact directly with physical memory by calling one of several driver routines that map physical memory into the virtual address space of the calling process. This could enable low-privileged users to achieve NT AUTHORITYSYSTEM privileges via a DeviceIoControl call associated with `MmMapIoSpace`, `IoAllocateMdl`, `MmBuildMdlForNonPagedPool`, or `MmMapLockedPages`.

The BIOS configuration for the "Enable Thunderbolt (and PCIe behind TBT) pre-boot modules" setting is enabled by default, allowing a local unauthenticated attacker with physical access to a user's system to obtain read or write access to main memory via a DMA attack during platform boot.

The issue is related to improper access control in the Insyde software tools, which may allow an authenticated user to potentially enable escalation of privilege or information disclosure via local access. This is a software vulnerability and not a firmware issue.

The issue is related to an information leak. Successful exploitation may allow an attacker to read information. The vulnerability is associated with a lack of protection for service data, which could enable an attacker to disclose protected information.

The issue is related to insufficient access control in the Huawei PCManager application, allowing for code execution. Successful exploitation may enable an attacker to execute code and read/write information, potentially leading to arbitrary file writing.

The issue is related to insufficient access control in the Huawei PC Manager application, allowing an attacker to execute arbitrary code and write arbitrary files. Successful exploitation of this issue may cause the attacker to execute code and read or write information.

An issue with improper restriction of operations within the bounds of a memory buffer was found. This issue may allow an attacker to access and control memory, potentially enabling remote code execution on the baseband radio processor of the Telematics Control Unit (TCU). The vulnerability is related to the temporary mobile subscriber identity (TMSI).

The issue is related to how WebKit in iOS handles "Content-Disposition: attachment" HTTP headers, which could allow man-in-the-middle attackers to obtain sensitive information. Exploitation of this issue may enable a remote attacker to access protected information by conducting man-in-the-middle attacks.

A cross-site scripting (XSS) issue allows remote web servers to inject arbitrary web script or HTML via a file accompanied by a "Content-Disposition: attachment" HTTP header.