Known vulnerabilities in grub2

Vendor: SUSE
Software: grub2
Software CPE: cpe:2.3:o:suse:grub2:*:*:*:*:*:suse_linux:*:*
Total vulnerabilities: 54
Public exploits: 3
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.2

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting grub2 grub2 is affected by 54 known vulnerabilities: 1 high, 1 medium, 52 low Critical High Medium Low

Vulnerabilities (54)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU118730 - Use After Free
CVE-2025-54770
CWE-416 Low
No
No
2.12-150600.8.44.2, 2.12-150700.19.19.1 24.11.2025 SB2025112110
SB2025112476
SB2025112845
and 4 more
#VU118668 - Use After Free
CVE-2025-61664
CWE-416 Low
No
No
2.02-193.1, 2.04-150300.22.61.1, 2.06-150400.11.66.1, 2.06-150500.29.59.1, 2.12-150600.8.44.2, 2.12-150700.19.19.1 21.11.2025 SB2025112110
SB2025112111
SB2025112122
and 11 more
#VU118667 - Use After Free
CVE-2025-61663
CWE-416 Low
No
No
2.02-193.1, 2.04-150300.22.61.1, 2.06-150400.11.66.1, 2.06-150500.29.59.1, 2.12-150600.8.44.2, 2.12-150700.19.19.1 21.11.2025 SB2025112110
SB2025112111
SB2025112122
and 10 more
#VU118665 - Use After Free
CVE-2025-61662
CWE-416 Low
No
No
2.02-193.1, 2.04-150300.22.61.1, 2.06-150400.11.66.1, 2.06-150500.29.59.1, 2.12-150600.8.44.2, 2.12-150700.19.19.1 21.11.2025 SB2025112110
SB2025112111
SB2025112122
and 28 more
#VU118663 - Out-of-bounds write
CVE-2025-61661
CWE-787 Low
No
No
2.02-193.1, 2.04-150300.22.61.1, 2.06-150400.11.66.1, 2.06-150500.29.59.1, 2.12-150600.8.44.2, 2.12-150700.19.19.1 21.11.2025 SB2025112110
SB2025112111
SB2025112122
and 10 more
#VU118662 - Use After Free
CVE-2025-54771
CWE-416 Low
No
No
2.02-193.1, 2.04-150300.22.61.1, 2.06-150400.11.66.1, 2.06-150500.29.59.1, 2.12-150600.8.44.2, 2.12-150700.19.19.1 21.11.2025 SB2025112110
SB2025112111
SB2025112122
and 10 more
#VU112027 - Observable discrepancy
CVE-2024-56738
CWE-203 Low
No
No
2.02-190.1, 2.04-150300.3.14.2, 2.04-150300.22.58.1, 2.06-150400.11.63.1, 2.06-150500.29.53.1, 2.12-150600.8.34.1, 2.12-150700.19.13.2 27.06.2025 SB2025062781
SB2025062794
SB2025080572
and 8 more
#VU104091 - Heap-based Buffer Overflow
CVE-2024-56737
CWE-122 Low
No
No
2.02-181.2, 2.04-150300.3.11.1, 2.04-150300.22.52.3, 2.06-150400.11.55.2, 2.06-150500.29.43.2, 2.12-150600.8.18.2 19.02.2025 SB202502197147
SB202502197181
SB202502197183
and 16 more
#VU104090 - Exposure of sensitive information to an unauthorized actor
CVE-2024-49504
CWE-200 Low
No
No
2.12-150600.8.18.2 19.02.2025 SB202502197147
SB202502197181
SB2025042513
and 3 more
#VU104082 - Integer overflow
CVE-2025-0678
CWE-190 Low
No
No
2.02-181.2, 2.04-150300.3.11.1, 2.04-150300.22.52.3, 2.06-150400.11.55.2, 2.06-150500.29.43.2, 2.12-150600.8.18.2 19.02.2025 SB202502197147
SB202502197181
SB202502197183
and 16 more
#VU104081 - Integer overflow
CVE-2025-0677
CWE-190 Low
No
No
2.02-181.2, 2.04-150300.3.11.1, 2.04-150300.22.52.3, 2.06-150400.11.55.2, 2.06-150500.29.43.2, 2.12-150600.8.18.2 19.02.2025 SB202502197147
SB202502197181
SB202502197183
and 18 more
#VU104080 - Out-of-bounds write
CVE-2025-0624
CWE-787 Low
No
No
2.02-181.2, 2.04-150300.3.11.1, 2.04-150300.22.52.3, 2.06-150400.11.55.2, 2.06-150500.29.43.2, 2.12-150600.8.18.2 19.02.2025 SB202502197147
SB202502197181
SB202502197183
and 43 more
#VU104079 - Use After Free
CVE-2025-0622
CWE-416 Low
No
No
2.02-181.2, 2.04-150300.3.11.1, 2.04-150300.22.52.3, 2.06-150400.11.55.2, 2.06-150500.29.43.2, 2.12-150600.8.18.2 19.02.2025 SB202502197147
SB202502197181
SB202502197183
and 19 more
#VU104078 - NULL Pointer Dereference
CVE-2024-45783
CWE-476 Low
No
No
2.02-181.2, 2.04-150300.3.11.1, 2.04-150300.22.52.3, 2.06-150400.11.55.2, 2.06-150500.29.43.2, 2.12-150600.8.18.2 19.02.2025 SB202502197147
SB202502197181
SB202502197183
and 16 more
#VU104077 - Out-of-bounds write
CVE-2024-45782
CWE-787 Low
No
No
2.02-181.2, 2.04-150300.3.11.1, 2.04-150300.22.52.3, 2.06-150400.11.55.2, 2.06-150500.29.43.2, 2.12-150600.8.18.2 19.02.2025 SB202502197147
SB202502197181
SB202502197183
and 16 more
#VU104076 - Out-of-bounds write
CVE-2024-45781
CWE-787 Low
No
No
2.02-181.2, 2.04-150300.3.11.1, 2.04-150300.22.52.3, 2.06-150400.11.55.2, 2.06-150500.29.43.2, 2.12-150600.8.18.2 19.02.2025 SB202502197147
SB202502197181
SB202502197183
and 17 more
#VU104072 - Integer overflow
CVE-2024-45780
CWE-190 Low
No
No
2.02-181.2, 2.04-150300.3.11.1, 2.04-150300.22.52.3, 2.06-150400.11.55.2, 2.06-150500.29.43.2, 2.12-150600.8.18.2 19.02.2025 SB202502197147
SB202502197181
SB202502197183
and 16 more
#VU104070 - Integer overflow
CVE-2024-45779
CWE-190 Low
No
No
2.02-181.2, 2.04-150300.3.11.1, 2.04-150300.22.52.3, 2.06-150400.11.55.2, 2.06-150500.29.43.2, 2.12-150600.8.18.2 19.02.2025 SB202502197147
SB202502197181
SB202502197183
and 16 more
#VU104069 - Integer overflow
CVE-2024-45778
CWE-190 Low
No
No
2.02-181.2, 2.04-150300.3.11.1, 2.04-150300.22.52.3, 2.06-150400.11.55.2, 2.06-150500.29.43.2, 2.12-150600.8.18.2 19.02.2025 SB202502197147
SB202502197181
SB202502197183
and 16 more
#VU104068 - Integer overflow
CVE-2024-45777
CWE-190 Low
No
No
2.02-181.2, 2.04-150300.3.11.1, 2.04-150300.22.52.3, 2.06-150400.11.55.2, 2.06-150500.29.43.2, 2.12-150600.8.18.2 19.02.2025 SB202502197147
SB202502197181
SB202502197183
and 16 more


Showing elements 1 - 20 out of 54