grub2

Every one of the 25 is a mark on the map. Named now: 1 to 25, most at risk first.

1. A flaw was found in grub2 in versions prior to 2.06, where it incorrectly enables the usage of the ACPI command when Secure Boot is enabled. This flaw allows an attacker with priv…CVE-2020-14372Gnu · 1.7% likely

   CWE-184

2. A flaw was found in grub2 in versions prior to 2.06. The rmmod implementation allows the unloading of a module used as a dependency without checking if any other dependent module…CVE-2020-25632Gnu · 1.2% likely

   CWE-416

3. Multiple integer underflows in Grub2 1.98 through 2.02 allow physically proximate attackers to bypass authentication, obtain sensitive information, or cause a denial of service (d…CVE-2015-8370Gnu · CVSS 7.4 · 1.1% likely

   CWE-191

4. When rendering certain unicode sequences, grub2's font code doesn't proper validate if the informed glyph's width and height is constrained within bitmap size. As consequence an a…CVE-2022-3775Gnu · CVSS 7.1 · 1.0% likely

   CWE-787

5. A flaw was found in grub2 in versions prior to 2.06. The option parser allows an attacker to write past the end of a heap-allocated buffer by calling certain commands with a large…CVE-2021-20225Gnu · 1.0% likely

   CWE-787

6. A flaw was found in grub2 in versions prior to 2.06. During USB device initialization, descriptors are read with very little bounds checking and assumes the USB device is providin…CVE-2020-25647Gnu · 0.8% likely

   CWE-787

7. GNU GRUB (aka GRUB2) through 2.12 has a heap-based buffer overflow in fs/hfs.c via crafted sblock data in an HFS filesystem.CVE-2024-56737GNU · CVSS 8.8 · 0.7% likely

   CWE-122

8. A flaw was found in grub2 in versions prior to 2.06. Setparam_prefix() in the menu rendering code performs a length calculation on the assumption that expressing a quoted single q…CVE-2021-20233Gnu · 0.6% likely

   CWE-787

9. A flaw was found in grub2 in versions prior to 2.06. Variable names present are expanded in the supplied command line into their corresponding variable contents, using a 1kB stack…CVE-2020-27749Gnu · 0.6% likely

   CWE-121

10. A buffer overflow was found in grub_font_construct_glyph(). A malicious crafted pf2 font can lead to an overflow when calculating the max_glyph_size value, allocating a smaller th…CVE-2022-2601Gnu · CVSS 8.6 · 0.5% likely

    CWE-122

11. A heap out-of-bounds write may heppen during the handling of Huffman tables in the PNG reader. This may lead to data corruption in the heap space. Confidentiality, Integrity and A…CVE-2021-3696Gnu · 0.5% likely

    CWE-787

12. A crafted 16-bit grayscale PNG image may lead to a out-of-bounds write in the heap area. An attacker may take advantage of that to cause heap data corruption or eventually arbitra…CVE-2021-3695Gnu · 0.5% likely

    CWE-787

13. A crafted JPEG image may lead the JPEG reader to underflow its data pointer, allowing user-controlled data to be written in heap. To a successful to be performed the attacker need…CVE-2021-3697Gnu · 0.5% likely

    CWE-787

14. If certificates that signed grub are installed into db, grub can be booted directly. It will then boot any kernel without signature validation. The booted kernel will think it was…CVE-2021-3418Gnu · 0.5% likely

    CWE-281

15. GNU GRUB (aka GRUB2) through 2.12 does not use a constant-time algorithm for grub_crypto_memcmp and thus allows side-channel attacks.CVE-2024-56738GNU · CVSS 5.3 · 0.4% likely

    CWE-208

16. A flaw was found in grub2 in versions prior to 2.06. The cutmem command does not honor secure boot locking allowing an privileged attacker to remove address ranges from memory cre…CVE-2020-27779Gnu · 0.4% likely

    CWE-285

17. A flaw was found in the grub2-set-bootflag utility of grub2. A local attacker could run this utility under resource pressure (for example by setting RLIMIT), causing grub2 configu…CVE-2019-14865Gnu · CVSS 5.9 · 0.3% likely

    CWE-267

18. A flaw in grub2 was found where its configuration file, known as grub.cfg, is being created with the wrong permission set allowing non privileged users to read its content. This r…CVE-2021-3981Gnu · 0.3% likely

    CWE-276

19. Grub2: missing unregister call for gettext command may lead to use-after-freeCVE-2025-61662GNU · CVSS 7.8 · 0.2% likely

    CWE-416

20. Grub2: grub2: out-of-bounds write via malicious usb deviceCVE-2025-61661GNU · CVSS 4.8 · 0.2% likely

    CWE-131

21. Grub2: use-after-free in net_set_vlanCVE-2025-54770GNU · CVSS 4.9 · 0.2% likely

    CWE-825

22. Grub2: use-after-free in grub_file_close()CVE-2025-54771GNU · CVSS 4.9 · 0.2% likely

    CWE-825

23. Grub2: missing unregister call for normal_exit command may lead to use-after-freeCVE-2025-61664GNU · CVSS 4.9 · 0.1% likely

    CWE-825

24. Grub2: missing unregister call for normal commands may lead to use-after-freeCVE-2025-61663GNU · CVSS 4.9 · 0.1% likely

    CWE-825

25. Bypass of GRUB lockdown restriction in Secure Boot mode via serial command MMIO base addressCVE-2026-97876GNU · CVSS 6.4 · 0.1% likely

    CWE-822

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.