Grub2

11 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2025-0686 MEDIUM PATCH This Month

A flaw was found in grub2. Rated medium severity (CVSS 6.4). No vendor patch available.

Memory Corruption Buffer Overflow RCE Grub2 Redhat +1

NVD

CVSS 3.1

6.4

EPSS

0.0%

CVE-2025-0685 MEDIUM PATCH This Month

A flaw was found in grub2. Rated medium severity (CVSS 6.4). No vendor patch available.

Memory Corruption Buffer Overflow RCE Grub2 Redhat +1

NVD

CVSS 3.1

6.4

EPSS

0.0%

CVE-2025-0684 MEDIUM PATCH This Month

A flaw was found in grub2. Rated medium severity (CVSS 6.4). No vendor patch available.

Memory Corruption Buffer Overflow RCE Grub2 Redhat +1

NVD

CVSS 3.1

6.4

EPSS

0.0%

CVE-2025-0678 HIGH PATCH This Week

A flaw was found in grub2. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Integer Overflow Buffer Overflow RCE Grub2 Openshift Container Platform +3

NVD

CVSS 3.1

7.8

EPSS

0.0%

CVE-2024-45782 HIGH PATCH This Week

A flaw was found in the HFS filesystem. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Memory Corruption Buffer Overflow Grub2 Openshift Container Platform +3

NVD

CVSS 3.1

7.8

EPSS

0.0%

CVE-2024-45778 MEDIUM PATCH This Month

A stack overflow flaw was found when reading a BFS file system. Rated medium severity (CVSS 4.1). No vendor patch available.

Integer Overflow Denial Of Service Grub2 Openshift Container Platform Enterprise Linux +2

NVD VulDB

CVSS 3.1

4.1

EPSS

0.0%

CVE-2025-1125 HIGH PATCH This Month

When reading data from a hfs filesystem, grub's hfs filesystem module uses user-controlled parameters from the filesystem metadata to calculate the internal buffers size, however it misses to. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Memory Corruption Buffer Overflow RCE Grub2 Redhat +1

NVD

CVSS 3.1

7.8

EPSS

0.0%

CVE-2025-0689 HIGH PATCH This Month

When reading data from disk, the grub's UDF filesystem module utilizes the user controlled data length metadata to allocate its internal buffers. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow RCE Grub2 Redhat Suse

NVD

CVSS 3.1

7.8

EPSS

0.0%

CVE-2024-45780 MEDIUM PATCH This Month

A flaw was found in grub2. Rated medium severity (CVSS 6.7), this vulnerability is low attack complexity. No vendor patch available.

Memory Corruption Buffer Overflow Grub2 Redhat Suse

NVD

CVSS 3.1

6.7

EPSS

0.0%

CVE-2024-45779 MEDIUM PATCH This Month

An integer overflow flaw was found in the BFS file system driver in grub2. Rated medium severity (CVSS 6.0), this vulnerability is low attack complexity. No vendor patch available.

Integer Overflow Information Disclosure Grub2 Redhat Suse

NVD

CVSS 3.1

6.0

EPSS

0.1%

CVE-2024-45777 MEDIUM PATCH This Month

A flaw was found in grub2. Rated medium severity (CVSS 6.7), this vulnerability is low attack complexity. No vendor patch available.

Memory Corruption Buffer Overflow Grub2 Openshift Enterprise Linux +2

NVD

CVSS 3.1

6.7

EPSS

0.0%

CVE-2025-0686

EPSS 0% CVSS 6.4

MEDIUM PATCH This Month

A flaw was found in grub2. Rated medium severity (CVSS 6.4). No vendor patch available.

Memory Corruption Buffer Overflow RCE +3

NVD

CVE-2025-0685

EPSS 0% CVSS 6.4

MEDIUM PATCH This Month

A flaw was found in grub2. Rated medium severity (CVSS 6.4). No vendor patch available.

Memory Corruption Buffer Overflow RCE +3

NVD

CVE-2025-0684

EPSS 0% CVSS 6.4

MEDIUM PATCH This Month

A flaw was found in grub2. Rated medium severity (CVSS 6.4). No vendor patch available.

Memory Corruption Buffer Overflow RCE +3

NVD

CVE-2025-0678

EPSS 0% CVSS 7.8

HIGH PATCH This Week

A flaw was found in grub2. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Integer Overflow Buffer Overflow RCE +5

NVD

CVE-2024-45782

EPSS 0% CVSS 7.8

HIGH PATCH This Week

A flaw was found in the HFS filesystem. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Memory Corruption Buffer Overflow +5

NVD

CVE-2024-45778

EPSS 0% CVSS 4.1

MEDIUM PATCH This Month

A stack overflow flaw was found when reading a BFS file system. Rated medium severity (CVSS 4.1). No vendor patch available.

Integer Overflow Denial Of Service Grub2 +4

NVD VulDB

CVE-2025-1125

EPSS 0% CVSS 7.8

HIGH PATCH This Month

Memory Corruption Buffer Overflow RCE +3

NVD

CVE-2025-0689

EPSS 0% CVSS 7.8

HIGH PATCH This Month

Buffer Overflow RCE Grub2 +2

NVD

CVE-2024-45780

EPSS 0% CVSS 6.7

MEDIUM PATCH This Month

A flaw was found in grub2. Rated medium severity (CVSS 6.7), this vulnerability is low attack complexity. No vendor patch available.

Memory Corruption Buffer Overflow Grub2 +2

NVD

CVE-2024-45779

EPSS 0% CVSS 6.0

MEDIUM PATCH This Month

An integer overflow flaw was found in the BFS file system driver in grub2. Rated medium severity (CVSS 6.0), this vulnerability is low attack complexity. No vendor patch available.

Integer Overflow Information Disclosure Grub2 +2

NVD

CVE-2024-45777

EPSS 0% CVSS 6.7

MEDIUM PATCH This Month

A flaw was found in grub2. Rated medium severity (CVSS 6.7), this vulnerability is low attack complexity. No vendor patch available.

Memory Corruption Buffer Overflow Grub2 +4

NVD