Known Vulnerabilities for Grub2 by GNU
Listed below are 10 of the newest known vulnerabilities associated with "Grub2" by "GNU".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2025-61662 json | Not Provided | 2025-11-18 | 2026-04-16 | |
| CVE-2024-1048 json | 3.3 - LOW | 2024-02-06 | 2024-03-11 | |
| CVE-2023-4693 json | An out-of-bounds read flaw was found on grub2's NTFS filesystem driver. This issue may allow a physically present attacker to... | 4.6 - MEDIUM | 2023-10-25 | 2024-03-08 |
| CVE-2023-4692 json | An out-of-bounds write flaw was found in grub2's NTFS filesystem driver. This issue may allow an attacker to present a specia... | 7.8 - HIGH | 2023-10-25 | 2024-03-08 |
| CVE-2023-4001 json | ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new secur... | 6.8 - MEDIUM | 2024-01-15 | 2024-02-05 |
| CVE-2022-28736 json | There's a use-after-free vulnerability in grub_cmd_chainloader() function; The chainloader command is used to boot up operati... | 7.8 - HIGH | 2023-07-20 | 2023-08-25 |
| CVE-2022-28735 json | The GRUB2's shim_lock verifier allows non-kernel files to be loaded on shim-powered secure boot systems. Allowing such files ... | 7.8 - HIGH | 2023-07-20 | 2023-08-25 |
| CVE-2022-28734 json | Out-of-bounds write when handling split HTTP headers; When handling split HTTP headers, GRUB2 HTTP code accidentally moves it... | 7 - HIGH | 2023-07-20 | 2024-01-16 |
| CVE-2022-28733 json | Integer underflow in grub_net_recv_ip4_packets; A malicious crafted IP packet can lead to an integer underflow in grub_net_re... | 8.1 - HIGH | 2023-07-20 | 2023-08-25 |
| CVE-2022-3775 json | When rendering certain unicode sequences, grub2's font code doesn't proper validate if the informed glyph's width and height ... | 7.1 - HIGH | 2022-12-19 | 2023-11-25 |