https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T19:54:17.102246+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2023:2487 ALSA-2023:2487 — Moderate: fwupd security and bug fix update 2026-10-02T19:54:17.180921+00:00

Affected: AlmaLinux:9: fwupd, AlmaLinux:9: fwupd-devel, AlmaLinux:9: fwupd-plugin-flashrom

The fwupd packages provide a service that allows session software to update device firmware.

Security Fix(es):

* fwupd: world readable password in /etc/fwupd/redfish.conf (CVE-2022-3287) * shim: 3rd party shim allow secure boot bypass (CVE-2022-34301) * shim: 3rd party shim allow secure boot bypass (CVE-2022-34302) * shim: 3rd party shim allow secure boot bypass (CVE-2022-34303)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

 https://cve.radiocsirt.org/vuln/bdu:2022-04955 bdu:2022-04955 2026-10-02T19:54:17.180983+00:00 bdu:2022-04955 https://cve.radiocsirt.org/vuln/certfr-2022-avi-729 certfr-2022-avi-729 — De multiples vulnérabilités ont été corrigées dans <span class="textit">Microsoft Windows</span>. Elles permettent à un… 2026-10-02T19:54:17.181000+00:00 certfr-2022-avi-729 https://cve.radiocsirt.org/vuln/euvd-2026-17832 EUVD-2026-17832 2026-10-02T19:54:17.181017+00:00 EUVD-2026-17832 https://cve.radiocsirt.org/vuln/fkie_cve-2022-34301 fkie_cve-2022-34301 2026-10-02T19:54:17.181027+00:00

A flaw was found in CryptoPro Secure Disk bootloaders before 2022-06-01. An attacker may use this bootloader to bypass or tamper with Secure Boot protections. In order to load and execute arbitrary code in the pre-boot stage, an attacker simply needs to replace the existing signed bootloader currently in use with this bootloader. Access to the EFI System Partition is required for booting using external media.

 https://cve.radiocsirt.org/vuln/ghsa-7j33-663j-fx7f GHSA-7j33-663j-fx7f 2026-10-02T19:54:17.181050+00:00

A flaw was found in CryptoPro Secure Disk bootloaders before 2022-06-01. An attacker may use this bootloader to bypass or tamper with Secure Boot protections. In order to load and execute arbitrary code in the pre-boot stage, an attacker simply needs to replace the existing signed bootloader currently in use with this bootloader. Access to the EFI System Partition is required for booting using external media.

 https://cve.radiocsirt.org/vuln/gsd-2022-34301 gsd-2022-34301 2026-10-02T19:54:17.181065+00:00 gsd-2022-34301 https://cve.radiocsirt.org/vuln/rhsa-2023:2487 RHSA-2023:2487 — Red Hat Security Advisory: fwupd security and bug fix update 2026-10-02T19:54:17.181075+00:00

fwupd: world readable password in /etc/fwupd/redfish.conf shim: 3rd party shim allow secure boot bypass shim: 3rd party shim allow secure boot bypass shim: 3rd party shim allow secure boot bypass

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1185 WID-SEC-W-2023-1185 — Red Hat Enterprise Linux: Mehrere Schwachstellen 2026-10-02T19:54:17.181094+00:00

Ein Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux ausnutzen, um beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszulösen, seine Privilegien zu erweitern und Daten zu manipulieren.