Known vulnerabilities in grub2 (Red Hat package)
Vendor:
Red Hat Inc.
Software:
grub2 (Red Hat package)
Software CPE:
cpe:2.3:o:red_hat:grub2_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Website:
https://www.redhat.com/en
Total vulnerabilities:
38
Public exploits:
4
Known exploited (KEV):
0
Highest CVSSv4 Score:
9.2
Breakdown by Severity Chart
2.02-0.87.el7_9.16
2.06-27.el9_0.23
2.02-87.el8_2.14
2.06-61.el9_2.11
2.02-99.el8_4.13
2.06-105.el9_6.1
2.06-86.el9_4.4
2.02-123.el8_6.19
2.02-152.el8_8.3
2.12-15.el10_0.2
2.12-29.el10_1.2
2.02-170.el8_10.1
2.06-104.el9_6
2.12-15.el10_0
2.02-0.87.el7_9.15
2.02-162.el8_10
2.06-61.el9_2.10
2.06-94.el9_5
2.06-27.el9_0.22
2.06-86.el9_4.2
2.02-152.el8_8.2
2.02-87.el8_2.13
2.02-99.el8_4.12
2.02-123.el8_6.18
2.02-156.el8
2.06-77.el9
2.02-0.87.el7_9.14
2.06-27.el9_0.16
2.06-46.el9_1.3
2.02-123.el8
2.02-87.el8_0
2.02-78.el8_1.1
2.02-99.el8_4.10
2.02-123.el8_6.12
2.02-142.el8_7.1
2.06-27.el9_0.12
2.02-0.87.el7_9.11
2.02-87.el8_2.11
2.02-87.el8_1.11
2.02-123.el8_6.8
2.02-99.el8_4.9
2.02-87.el8_1.10
2.06-27.el9_0.7
2.02-87.el8_2.10
2.02-0.86.el7_6.3
2.02-0.86.el7_7.3
2.02-0.87.el7_9.2
2.02-0.86.el7_2.2
2.02-0.86.el7_3.2
2.02-0.86.el7_4.2
2.02-87.el8_1.2
2.02-90.el8_3.1
2.02-0.86.el7_6
2.02-0.86.el7_2
2.02-0.86.el7_7
2.02-0.86.el7_4
2.02-0.86.el7
2.02-87.el8_2
2.02-0.86.el7_8
2.02-87.el8_1
2.02-0.29.el7
2.02-0.33.el7_2
Vulnerabilities (38)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU118665 - Use After Free CVE-2025-61662 |
CWE-416 | Low | 2.02-0.87.el7_9.16, 2.02-87.el8_2.14, 2.02-99.el8_4.13, 2.02-123.el8_6.19, 2.02-152.el8_8.3, 2.02-170.el8_10.1, 2.06-27.el9_0.23, 2.06-61.el9_2.11, 2.06-86.el9_4.4, 2.06-105.el9_6.1, 2.12-15.el10_0.2, 2.12-29.el10_1.2 | 21.11.2025 |
SB2025112110 SB2025112111 SB2025112122 and 28 more |
||
| #VU104088 - Security Features CVE-2025-1118 |
CWE-254 | Low | 2.12-15.el10_0 | 19.02.2025 |
SB202502197147 SB202502197181 SB202502197183 and 18 more |
||
| #VU104081 - Integer overflow CVE-2025-0677 |
CWE-190 | Low | 2.12-15.el10_0 | 19.02.2025 |
SB202502197147 SB202502197181 SB202502197183 and 18 more |
||
| #VU104080 - Out-of-bounds write CVE-2025-0624 |
CWE-787 | Low | 2.02-0.87.el7_9.15, 2.02-87.el8_2.13, 2.02-99.el8_4.12, 2.02-123.el8_6.18, 2.02-152.el8_8.2, 2.02-162.el8_10, 2.06-27.el9_0.22, 2.06-61.el9_2.10, 2.06-86.el9_4.2, 2.06-94.el9_5 | 19.02.2025 |
SB202502197147 SB202502197181 SB202502197183 and 43 more |
||
| #VU104079 - Use After Free CVE-2025-0622 |
CWE-416 | Low | 2.12-15.el10_0 | 19.02.2025 |
SB202502197147 SB202502197181 SB202502197183 and 19 more |
||
| #VU104076 - Out-of-bounds write CVE-2024-45781 |
CWE-787 | Low | 2.12-15.el10_0 | 19.02.2025 |
SB202502197147 SB202502197181 SB202502197183 and 17 more |
||
| #VU104067 - Integer overflow CVE-2024-45776 |
CWE-190 | Low | 2.12-15.el10_0 | 19.02.2025 |
SB202502197147 SB202502197181 SB202502197183 and 17 more |
||
| #VU87164 - Resource Management Errors CVE-2024-1048 |
CWE-399 | Low | 2.02-156.el8, 2.06-77.el9 | 06.03.2024 |
SB2024030663 SB2024030664 SB2024043039 and 7 more |
||
| #VU85654 - Security Features CVE-2023-4001 |
CWE-254 | Low | 2.06-27.el9_0.16 | 22.01.2024 |
SB2024012217 SB2024012224 SB2024012225 and 2 more |
||
| #VU81628 - Out-of-bounds read CVE-2023-4693 |
CWE-125 | Low | 2.02-156.el8, 2.06-77.el9 | 05.10.2023 |
SB2023100511 SB2023100523 SB2023100703 and 26 more |
||
| #VU81627 - Out-of-bounds write CVE-2023-4692 |
CWE-787 | Low | 2.02-156.el8, 2.06-77.el9 | 05.10.2023 |
SB2023100511 SB2023100523 SB2023100703 and 27 more |
||
| #VU69395 - Out-of-bounds write CVE-2022-3775 |
CWE-787 | Low | 2.02-87.el8_1.11, 2.02-87.el8_2.11, 2.02-99.el8_4.10, 2.02-123.el8_6.12, 2.02-142.el8_7.1, 2.06-27.el9_0.12, 2.06-46.el9_1.3 | 16.11.2022 |
SB2022111652 SB2022111654 SB2022111661 and 38 more |
||
| #VU69394 - Out-of-bounds write CVE-2022-2601 |
CWE-787 | Low | 2.02-0.87.el7_9.14, 2.02-87.el8_1.11, 2.02-87.el8_2.11, 2.02-99.el8_4.10, 2.02-123.el8_6.12, 2.02-142.el8_7.1, 2.06-27.el9_0.12, 2.06-46.el9_1.3 | 16.11.2022 |
SB2022111652 SB2022111654 SB2022111661 and 44 more |
||
| #VU64065 - Use After Free CVE-2022-28736 |
CWE-416 | Low | 2.02-87.el8_1.10, 2.02-87.el8_2.10, 2.02-99.el8_4.9, 2.02-123.el8_6.8, 2.06-27.el9_0.7 | 08.06.2022 |
SB2022060810 SB2022061540 SB2022061566 and 32 more |
||
| #VU64064 - Insufficient Verification of Data Authenticity CVE-2022-28735 |
CWE-345 | Low | 2.02-87.el8_1.10, 2.02-87.el8_2.10, 2.02-99.el8_4.9, 2.02-123.el8_6.8, 2.06-27.el9_0.7 | 08.06.2022 |
SB2022060810 SB2022061540 SB2022061566 and 24 more |
||
| #VU64063 - Out-of-bounds write CVE-2022-28734 |
CWE-787 | Medium | 2.02-87.el8_1.10, 2.02-87.el8_2.10, 2.02-99.el8_4.9, 2.02-123.el8_6.8, 2.06-27.el9_0.7 | 08.06.2022 |
SB2022060810 SB2022061540 SB2022061566 and 36 more |
||
| #VU64062 - Integer underflow CVE-2022-28733 |
CWE-191 | High | 2.02-0.87.el7_9.11, 2.02-87.el8_1.10, 2.02-87.el8_2.10, 2.02-99.el8_4.9, 2.02-123.el8_6.8, 2.06-27.el9_0.7 | 08.06.2022 |
SB2022060810 SB2022061540 SB2022061566 and 38 more |
||
| #VU64061 - Integer underflow CVE-2021-3697 |
CWE-191 | Low | 2.02-87.el8_1.10, 2.02-87.el8_2.10, 2.02-99.el8_4.9, 2.02-123.el8_6.8, 2.06-27.el9_0.7 | 08.06.2022 |
SB2022060810 SB2022061540 SB2022061566 and 31 more |
||
| #VU64059 - Out-of-bounds write CVE-2021-3696 |
CWE-787 | Low | 2.02-87.el8_1.10, 2.02-87.el8_2.10, 2.02-99.el8_4.9, 2.02-123.el8_6.8, 2.06-27.el9_0.7 | 08.06.2022 |
SB2022060810 SB2022061540 SB2022061566 and 31 more |
||
| #VU64057 - Out-of-bounds write CVE-2021-3695 |
CWE-787 | Low | 2.02-87.el8_1.10, 2.02-87.el8_2.10, 2.02-99.el8_4.9, 2.02-123.el8_6.8, 2.06-27.el9_0.7 | 08.06.2022 |
SB2022060810 SB2022061540 SB2022061566 and 31 more |
Showing elements 1 - 20 out of 38