cve,link,title,description,vendor,products,score,severity,epss,cisa,article,ransomware,exploited,poc,trended,trended_no_1,published,trended_score CVE-2024-1048,https://securityvulnerability.io/vulnerability/CVE-2024-1048,Grub2-Set-Bootflag Flaw May Cause Filesystem Issues,"A flaw was found in the grub2-set-bootflag utility of grub2. After the fix of CVE-2019-14865, grub2-set-bootflag will create a temporary file with the new grubenv content and rename it to the original grubenv file. If the program is killed before the rename operation, the temporary file will not be removed and may fill the filesystem when invoked multiple times, resulting in a filesystem out of free inodes or blocks.",Red Hat,"Grub2,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Fedora",3.3,LOW,0.00044999999227002263,false,false,false,false,,false,false,2024-02-06T17:30:35.360Z,0 CVE-2023-4692,https://securityvulnerability.io/vulnerability/CVE-2023-4692,Grub2: out-of-bounds write at fs/ntfs.c may lead to unsigned code execution,"An out-of-bounds write flaw was identified in the NTFS filesystem driver of GRUB2. This vulnerability could enable an attacker to present a specially crafted NTFS filesystem image, resulting in potential corruption of GRUB's heap metadata. In certain scenarios, this may also affect the UEFI firmware heap metadata, which could lead to arbitrary code execution and a bypass of secure boot protections.",Red Hat,"grub2,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Fedora",7.8,HIGH,0.0004199999966658652,false,false,false,false,,false,false,2023-10-25T10:27:29.173Z,0 CVE-2023-4693,https://securityvulnerability.io/vulnerability/CVE-2023-4693,Out-of-bounds read at fs/ntfs.c,"An out-of-bounds read flaw was found on grub2's NTFS filesystem driver. This issue may allow a physically present attacker to present a specially crafted NTFS file system image to read arbitrary memory locations. A successful attack allows sensitive data cached in memory or EFI variable values to be leaked, presenting a high Confidentiality risk.",Red Hat,"grub2,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Fedora",4.6,MEDIUM,0.0006500000017695129,false,false,false,false,,false,false,2023-10-25T10:27:29.100Z,0