Known vulnerabilities in grub2
Vendor:
SUSE
Software:
grub2
Software CPE:
cpe:2.3:o:suse:grub2:*:*:*:*:*:suse_linux:*:*
Website:
https://www.suse.com/
Total vulnerabilities:
54
Public exploits:
3
Known exploited (KEV):
0
Highest CVSSv4 Score:
9.2
Breakdown by Severity Chart
2.02-199.1
2.06-150400.11.72.2
2.12-150600.8.52.1
2.06-150500.29.65.1
2.12-150700.19.29.1
2.06-150400.11.69.1
2.02-196.1
2.06-150500.29.62.1
2.12-150700.19.26.1
2.12-150600.8.49.1
2.12-150700.19.19.1
2.06-150400.11.66.1
2.02-193.1
2.12-150600.8.44.2
2.06-150500.29.59.1
2.04-150300.22.61.1
2.12-150600.8.37.1
2.12-150700.19.16.1
2.12-150700.19.13.2
2.06-150500.29.56.1
2.12-150600.8.34.1
2.06-150400.11.63.1
2.02-190.1
2.04-150300.3.14.2
2.06-150500.29.53.1
2.04-150300.22.58.1
2.02-187.2
2.04-150300.3.11.1
2.12-150700.19.3.1
2.04-150300.22.55.2
2.06-150500.29.46.2
2.12-150600.8.21.2
2.02-184.2
2.06-150400.11.58.2
2.02-181.2
2.04-150300.22.52.3
2.06-150500.29.43.2
2.12-150600.8.18.2
2.06-150400.11.55.2
2.06-150500.29.37.1
2.12-150600.8.12.1
2.06-150500.29.34.2
2.06-150500.29.25.12
2.06-150500.29.22.2
2.06-150400.11.38.1
2.06-150500.29.8.1
2.04-150300.22.43.1
2.02-169.1
2.06-150400.11.25.1
2.04-150300.3.8.1
2.04-150300.22.32.1
2.04-150200.9.73.1
2.02-150100.123.22.1
2.02-158.1
2.02-115.74.1
2.02-19.66.1
2.02-26.43.1
2.04-9.34.1
2.02-4.69.1
2.02-12.47.1
2.02-115.59.1
2.02-153.1
2.04-150300.22.25.1
2.04-150200.9.68.1
2.02-115.72.1
2.02-142.1
2.02-150100.123.17.1
2.06-150400.11.17.1
2.02-150000.122.17.1
2.04-9.45.2
2.04-150300.3.5.1
2.04-150300.22.20.2
2.02-150100.123.12.2
2.02-115.67.2
2.02-143.2
2.02-137.2
2.02-150000.122.12.2
2.06-150400.11.5.2
2.04-150200.9.63.2
Vulnerabilities (54)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU118730 - Use After Free CVE-2025-54770 |
CWE-416 | Low | 2.12-150600.8.44.2, 2.12-150700.19.19.1 | 24.11.2025 |
SB2025112110 SB2025112476 SB2025112845 and 4 more |
||
| #VU118668 - Use After Free CVE-2025-61664 |
CWE-416 | Low | 2.02-193.1, 2.04-150300.22.61.1, 2.06-150400.11.66.1, 2.06-150500.29.59.1, 2.12-150600.8.44.2, 2.12-150700.19.19.1 | 21.11.2025 |
SB2025112110 SB2025112111 SB2025112122 and 11 more |
||
| #VU118667 - Use After Free CVE-2025-61663 |
CWE-416 | Low | 2.02-193.1, 2.04-150300.22.61.1, 2.06-150400.11.66.1, 2.06-150500.29.59.1, 2.12-150600.8.44.2, 2.12-150700.19.19.1 | 21.11.2025 |
SB2025112110 SB2025112111 SB2025112122 and 10 more |
||
| #VU118665 - Use After Free CVE-2025-61662 |
CWE-416 | Low | 2.02-193.1, 2.04-150300.22.61.1, 2.06-150400.11.66.1, 2.06-150500.29.59.1, 2.12-150600.8.44.2, 2.12-150700.19.19.1 | 21.11.2025 |
SB2025112110 SB2025112111 SB2025112122 and 28 more |
||
| #VU118663 - Out-of-bounds write CVE-2025-61661 |
CWE-787 | Low | 2.02-193.1, 2.04-150300.22.61.1, 2.06-150400.11.66.1, 2.06-150500.29.59.1, 2.12-150600.8.44.2, 2.12-150700.19.19.1 | 21.11.2025 |
SB2025112110 SB2025112111 SB2025112122 and 10 more |
||
| #VU118662 - Use After Free CVE-2025-54771 |
CWE-416 | Low | 2.02-193.1, 2.04-150300.22.61.1, 2.06-150400.11.66.1, 2.06-150500.29.59.1, 2.12-150600.8.44.2, 2.12-150700.19.19.1 | 21.11.2025 |
SB2025112110 SB2025112111 SB2025112122 and 10 more |
||
| #VU112027 - Observable discrepancy CVE-2024-56738 |
CWE-203 | Low | 2.02-190.1, 2.04-150300.3.14.2, 2.04-150300.22.58.1, 2.06-150400.11.63.1, 2.06-150500.29.53.1, 2.12-150600.8.34.1, 2.12-150700.19.13.2 | 27.06.2025 |
SB2025062781 SB2025062794 SB2025080572 and 8 more |
||
| #VU104091 - Heap-based Buffer Overflow CVE-2024-56737 |
CWE-122 | Low | 2.02-181.2, 2.04-150300.3.11.1, 2.04-150300.22.52.3, 2.06-150400.11.55.2, 2.06-150500.29.43.2, 2.12-150600.8.18.2 | 19.02.2025 |
SB202502197147 SB202502197181 SB202502197183 and 16 more |
||
| #VU104090 - Exposure of sensitive information to an unauthorized actor CVE-2024-49504 |
CWE-200 | Low | 2.12-150600.8.18.2 | 19.02.2025 |
SB202502197147 SB202502197181 SB2025042513 and 3 more |
||
| #VU104082 - Integer overflow CVE-2025-0678 |
CWE-190 | Low | 2.02-181.2, 2.04-150300.3.11.1, 2.04-150300.22.52.3, 2.06-150400.11.55.2, 2.06-150500.29.43.2, 2.12-150600.8.18.2 | 19.02.2025 |
SB202502197147 SB202502197181 SB202502197183 and 16 more |
||
| #VU104081 - Integer overflow CVE-2025-0677 |
CWE-190 | Low | 2.02-181.2, 2.04-150300.3.11.1, 2.04-150300.22.52.3, 2.06-150400.11.55.2, 2.06-150500.29.43.2, 2.12-150600.8.18.2 | 19.02.2025 |
SB202502197147 SB202502197181 SB202502197183 and 18 more |
||
| #VU104080 - Out-of-bounds write CVE-2025-0624 |
CWE-787 | Low | 2.02-181.2, 2.04-150300.3.11.1, 2.04-150300.22.52.3, 2.06-150400.11.55.2, 2.06-150500.29.43.2, 2.12-150600.8.18.2 | 19.02.2025 |
SB202502197147 SB202502197181 SB202502197183 and 43 more |
||
| #VU104079 - Use After Free CVE-2025-0622 |
CWE-416 | Low | 2.02-181.2, 2.04-150300.3.11.1, 2.04-150300.22.52.3, 2.06-150400.11.55.2, 2.06-150500.29.43.2, 2.12-150600.8.18.2 | 19.02.2025 |
SB202502197147 SB202502197181 SB202502197183 and 19 more |
||
| #VU104078 - NULL Pointer Dereference CVE-2024-45783 |
CWE-476 | Low | 2.02-181.2, 2.04-150300.3.11.1, 2.04-150300.22.52.3, 2.06-150400.11.55.2, 2.06-150500.29.43.2, 2.12-150600.8.18.2 | 19.02.2025 |
SB202502197147 SB202502197181 SB202502197183 and 16 more |
||
| #VU104077 - Out-of-bounds write CVE-2024-45782 |
CWE-787 | Low | 2.02-181.2, 2.04-150300.3.11.1, 2.04-150300.22.52.3, 2.06-150400.11.55.2, 2.06-150500.29.43.2, 2.12-150600.8.18.2 | 19.02.2025 |
SB202502197147 SB202502197181 SB202502197183 and 16 more |
||
| #VU104076 - Out-of-bounds write CVE-2024-45781 |
CWE-787 | Low | 2.02-181.2, 2.04-150300.3.11.1, 2.04-150300.22.52.3, 2.06-150400.11.55.2, 2.06-150500.29.43.2, 2.12-150600.8.18.2 | 19.02.2025 |
SB202502197147 SB202502197181 SB202502197183 and 17 more |
||
| #VU104072 - Integer overflow CVE-2024-45780 |
CWE-190 | Low | 2.02-181.2, 2.04-150300.3.11.1, 2.04-150300.22.52.3, 2.06-150400.11.55.2, 2.06-150500.29.43.2, 2.12-150600.8.18.2 | 19.02.2025 |
SB202502197147 SB202502197181 SB202502197183 and 16 more |
||
| #VU104070 - Integer overflow CVE-2024-45779 |
CWE-190 | Low | 2.02-181.2, 2.04-150300.3.11.1, 2.04-150300.22.52.3, 2.06-150400.11.55.2, 2.06-150500.29.43.2, 2.12-150600.8.18.2 | 19.02.2025 |
SB202502197147 SB202502197181 SB202502197183 and 16 more |
||
| #VU104069 - Integer overflow CVE-2024-45778 |
CWE-190 | Low | 2.02-181.2, 2.04-150300.3.11.1, 2.04-150300.22.52.3, 2.06-150400.11.55.2, 2.06-150500.29.43.2, 2.12-150600.8.18.2 | 19.02.2025 |
SB202502197147 SB202502197181 SB202502197183 and 16 more |
||
| #VU104068 - Integer overflow CVE-2024-45777 |
CWE-190 | Low | 2.02-181.2, 2.04-150300.3.11.1, 2.04-150300.22.52.3, 2.06-150400.11.55.2, 2.06-150500.29.43.2, 2.12-150600.8.18.2 | 19.02.2025 |
SB202502197147 SB202502197181 SB202502197183 and 16 more |
Showing elements 1 - 20 out of 54