Known vulnerabilities in UEFI firmware

Vendor: Intel
Software: UEFI firmware
Software CPE: cpe:2.3:h:intel:uefi_firmware:*:*:*:*:*:*:*:*
Website: https://www.intel.com
Total vulnerabilities: 18
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.7

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting UEFI firmware UEFI firmware is affected by 18 known vulnerabilities: 1 high, 17 low Critical High Medium Low

Vulnerabilities (18)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU104041 - Improper input validation
CVE-2024-28047		 CWE-20 Low
No
No
 - 18.02.2025 SB2025021823
SB2025040452
SB2025040453
and 6 more
#VU104040 - Improper Initialization
CVE-2024-31157		 CWE-665 Low
No
No
 - 18.02.2025 SB2025021823
SB2025040452
SB2025040453
and 3 more
#VU104039 - Improper input validation
CVE-2024-39279		 CWE-20 Low
No
No
 - 18.02.2025 SB2025021823
SB2025022025
SB2025022403
and 8 more
#VU104038 - Improper input validation
CVE-2024-28127		 CWE-20 Low
No
No
 - 18.02.2025 SB2025021823
SB2025040452
SB2025040453
and 1 more
#VU104037 - Improper input validation
CVE-2024-29214		 CWE-20 Low
No
No
 - 18.02.2025 SB2025021823
SB2025040452
SB2025040453
and 2 more
#VU104036 - Improper input validation
CVE-2024-24582		 CWE-20 Low
No
No
 - 18.02.2025 SB2025021823
SB2025040452
SB2025040453
and 2 more
#VU104033 - Improper input validation
CVE-2023-34440		 CWE-20 Low
No
No
 - 18.02.2025 SB2025021823
SB2025040452
SB2025040453
and 2 more
#VU104031 - Improper input validation
CVE-2023-43758		 CWE-20 Low
No
No
 - 18.02.2025 SB2025021823
SB2025040452
SB2025040453
and 2 more
#VU104009 - Memory corruption
CVE-2024-21859		 CWE-119 Low
No
No
 - 17.02.2025 SB2025021716
SB2025051942
SB2025052073
and 3 more
#VU104008 - Memory corruption
CVE-2024-31155		 CWE-119 Low
No
No
 - 17.02.2025 SB2025021716
SB2025051942
SB2025052073
and 3 more
#VU100417 - Insufficient Control Flow Management
CVE-2024-25565		 CWE-691 Low
No
No
 - 13.11.2024 SB2024111307
SB2024121923
SB2025010714
and 6 more
#VU97445 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2024-23599		 CWE-362 Low
No
No
 - 17.09.2024 SB2024091744
SB2024102312
SB2024102546
and 3 more
#VU89755 - Improper input validation
CVE-2023-22662		 CWE-20 Low
No
No
 - 22.05.2024 SB2024052236
#VU89754 - Improper input validation
CVE-2024-22095		 CWE-20 Low
No
No
 - 22.05.2024 SB2024052236
#VU89751 - Memory corruption
CVE-2024-23980		 CWE-119 Low
No
No
 - 22.05.2024 SB2024052236
#VU89750 - Improper input validation
CVE-2024-24981		 CWE-20 Low
No
No
 - 22.05.2024 SB2024052236
#VU89749 - Improper input validation
CVE-2024-23487		 CWE-20 High
No
No
 - 22.05.2024 SB2024052236
#VU89747 - Improper input validation
CVE-2024-22382		 CWE-20 Low
No
No
 - 22.05.2024 SB2024052236