https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-01T11:39:40.650660+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2023-4692 CVE-2023-4692 — Grub2: out-of-bounds write at fs/ntfs.c may lead to unsigned code execution 2026-10-01T11:39:40.721777+00:00

Affected: grub, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 7

An out-of-bounds write flaw was found in grub2's NTFS filesystem driver. This issue may allow an attacker to present a specially crafted NTFS filesystem image, leading to grub's heap metadata corruption. In some circumstances, the attack may also corrupt the UEFI firmware heap metadata. As a result, arbitrary code execution and secure boot protection bypass may be achieved.

 https://vulnerability.circl.lu/vuln/usn-6410-1 USN-6410-1 — grub2-signed, grub2-unsigned vulnerabilities 2026-10-01T11:39:40.721884+00:00

Affected: Ubuntu:20.04:LTS: grub2-signed, Ubuntu:22.04:LTS: grub2-signed, Ubuntu:22.04:LTS: grub2-unsigned

It was discovered that a specially crafted file system image could cause a heap-based out-of-bounds write. A local attacker could potentially use this to perform arbitrary code execution bypass and bypass secure boot protections. (CVE-2023-4692)

It was discovered that a specially crafted file system image could cause an out-of-bounds read. A physically-present attacker could possibly use this to leak sensitive information to the GRUB pager. (CVE-2023-4693)