Lookup for vulnerable packages by Package URL.

Purlpkg:deb/debian/grub2@2.06-2
Typedeb
Namespacedebian
Namegrub2
Version2.06-2
Qualifiers
Subpath
Is_vulnerabletrue
Next_non_vulnerable_version2.12-1~bpo12+1
Latest_non_vulnerable_version2.14-2
Affected_by_vulnerabilities
0
url VCID-2f6m-msj2-2fgy
vulnerability_id VCID-2f6m-msj2-2fgy
summary Multiple vulnerabilities have been discovered in GRUB, the worst of which may allow for secureboot bypass.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-3697.json
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-3697.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2021-3697
reference_id
reference_type
scores
0
value 0.00067
scoring_system epss
scoring_elements 0.20795
published_at 2026-04-01T12:55:00Z
1
value 0.00067
scoring_system epss
scoring_elements 0.20854
published_at 2026-04-09T12:55:00Z
2
value 0.00067
scoring_system epss
scoring_elements 0.2087
published_at 2026-04-11T12:55:00Z
3
value 0.00067
scoring_system epss
scoring_elements 0.20827
published_at 2026-04-12T12:55:00Z
4
value 0.00067
scoring_system epss
scoring_elements 0.20774
published_at 2026-04-13T12:55:00Z
5
value 0.00067
scoring_system epss
scoring_elements 0.20765
published_at 2026-04-16T12:55:00Z
6
value 0.00067
scoring_system epss
scoring_elements 0.20757
published_at 2026-04-18T12:55:00Z
7
value 0.00067
scoring_system epss
scoring_elements 0.20942
published_at 2026-04-02T12:55:00Z
8
value 0.00067
scoring_system epss
scoring_elements 0.20999
published_at 2026-04-04T12:55:00Z
9
value 0.00067
scoring_system epss
scoring_elements 0.20716
published_at 2026-04-07T12:55:00Z
10
value 0.00067
scoring_system epss
scoring_elements 0.20793
published_at 2026-04-08T12:55:00Z
11
value 0.00069
scoring_system epss
scoring_elements 0.21103
published_at 2026-04-24T12:55:00Z
12
value 0.00069
scoring_system epss
scoring_elements 0.21106
published_at 2026-04-26T12:55:00Z
13
value 0.00069
scoring_system epss
scoring_elements 0.21234
published_at 2026-04-21T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2021-3697
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3697
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3697
3
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
4
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1991687
reference_id 1991687
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1991687
5
reference_url https://security.archlinux.org/AVG-2762
reference_id AVG-2762
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2762
6
reference_url https://security.gentoo.org/glsa/202209-12
reference_id GLSA-202209-12
reference_type
scores
url https://security.gentoo.org/glsa/202209-12
7
reference_url https://access.redhat.com/errata/RHSA-2022:5095
reference_id RHSA-2022:5095
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:5095
8
reference_url https://access.redhat.com/errata/RHSA-2022:5096
reference_id RHSA-2022:5096
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:5096
9
reference_url https://access.redhat.com/errata/RHSA-2022:5098
reference_id RHSA-2022:5098
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:5098
10
reference_url https://access.redhat.com/errata/RHSA-2022:5099
reference_id RHSA-2022:5099
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:5099
11
reference_url https://access.redhat.com/errata/RHSA-2022:5100
reference_id RHSA-2022:5100
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:5100
12
reference_url https://usn.ubuntu.com/6355-1/
reference_id USN-6355-1
reference_type
scores
url https://usn.ubuntu.com/6355-1/
fixed_packages
0
url pkg:deb/debian/grub2@2.06-3~deb11u2
purl pkg:deb/debian/grub2@2.06-3~deb11u2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-33ec-pjax-nkak
1
vulnerability VCID-8kh4-ym2x-k3he
2
vulnerability VCID-9mut-ye1e-pbdx
3
vulnerability VCID-gjbg-nve3-m3gy
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/grub2@2.06-3~deb11u2
aliases CVE-2021-3697
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-2f6m-msj2-2fgy
1
url VCID-33ec-pjax-nkak
vulnerability_id VCID-33ec-pjax-nkak
summary Multiple vulnerabilities have been discoverd in GRUB, which may lead to secure boot circumvention or code execution.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-3775.json
reference_id
reference_type
scores
0
value 7.1
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-3775.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2022-3775
reference_id
reference_type
scores
0
value 0.00078
scoring_system epss
scoring_elements 0.23205
published_at 2026-04-11T12:55:00Z
1
value 0.00078
scoring_system epss
scoring_elements 0.23168
published_at 2026-04-12T12:55:00Z
2
value 0.00078
scoring_system epss
scoring_elements 0.2311
published_at 2026-04-13T12:55:00Z
3
value 0.00078
scoring_system epss
scoring_elements 0.23124
published_at 2026-04-16T12:55:00Z
4
value 0.00078
scoring_system epss
scoring_elements 0.23116
published_at 2026-04-18T12:55:00Z
5
value 0.0008
scoring_system epss
scoring_elements 0.2363
published_at 2026-04-09T12:55:00Z
6
value 0.0008
scoring_system epss
scoring_elements 0.2369
published_at 2026-04-02T12:55:00Z
7
value 0.0008
scoring_system epss
scoring_elements 0.23732
published_at 2026-04-04T12:55:00Z
8
value 0.0008
scoring_system epss
scoring_elements 0.23513
published_at 2026-04-07T12:55:00Z
9
value 0.0008
scoring_system epss
scoring_elements 0.23584
published_at 2026-04-08T12:55:00Z
10
value 0.00083
scoring_system epss
scoring_elements 0.24002
published_at 2026-04-26T12:55:00Z
11
value 0.00083
scoring_system epss
scoring_elements 0.24138
published_at 2026-04-21T12:55:00Z
12
value 0.00083
scoring_system epss
scoring_elements 0.24013
published_at 2026-04-24T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2022-3775
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2601
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2601
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3775
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3775
4
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 6.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
5
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2138880
reference_id 2138880
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2138880
6
reference_url https://security.gentoo.org/glsa/202311-14
reference_id GLSA-202311-14
reference_type
scores
url https://security.gentoo.org/glsa/202311-14
7
reference_url https://access.redhat.com/errata/RHSA-2022:8494
reference_id RHSA-2022:8494
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:8494
8
reference_url https://access.redhat.com/errata/RHSA-2022:8800
reference_id RHSA-2022:8800
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:8800
9
reference_url https://access.redhat.com/errata/RHSA-2022:8978
reference_id RHSA-2022:8978
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:8978
10
reference_url https://access.redhat.com/errata/RHSA-2023:0047
reference_id RHSA-2023:0047
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:0047
11
reference_url https://access.redhat.com/errata/RHSA-2023:0048
reference_id RHSA-2023:0048
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:0048
12
reference_url https://access.redhat.com/errata/RHSA-2023:0049
reference_id RHSA-2023:0049
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:0049
13
reference_url https://access.redhat.com/errata/RHSA-2023:0752
reference_id RHSA-2023:0752
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:0752
14
reference_url https://usn.ubuntu.com/6355-1/
reference_id USN-6355-1
reference_type
scores
url https://usn.ubuntu.com/6355-1/
fixed_packages
0
url pkg:deb/debian/grub2@2.06-3~deb11u6
purl pkg:deb/debian/grub2@2.06-3~deb11u6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1tdk-6d8a-m7h8
1
vulnerability VCID-1vtj-un1a-afax
2
vulnerability VCID-29d7-asmu-e7ev
3
vulnerability VCID-3vhv-ya75-cuhc
4
vulnerability VCID-53x3-83by-gueq
5
vulnerability VCID-5a7e-ctj7-dqab
6
vulnerability VCID-5m3u-p8q4-kfhx
7
vulnerability VCID-5m6c-h4j2-mqcg
8
vulnerability VCID-5vyx-ut4z-jucd
9
vulnerability VCID-6cpn-v8j3-7ub3
10
vulnerability VCID-6tg5-6gjc-nygy
11
vulnerability VCID-6vxc-35x2-3fek
12
vulnerability VCID-c2vg-36gb-bqas
13
vulnerability VCID-dn64-5ysd-yfer
14
vulnerability VCID-gaet-924c-57dv
15
vulnerability VCID-h2ca-d9yc-vbex
16
vulnerability VCID-hn4b-sdcq-j3bx
17
vulnerability VCID-nphq-62t2-b7bk
18
vulnerability VCID-pjq7-bxwk-uqec
19
vulnerability VCID-s86w-7czc-s3a9
20
vulnerability VCID-sub1-vd8w-dka7
21
vulnerability VCID-swtj-9pmu-4ugn
22
vulnerability VCID-tkur-tbms-zkcz
23
vulnerability VCID-ur99-cm1x-cfdm
24
vulnerability VCID-wy3p-p9zf-r7ef
25
vulnerability VCID-x57b-4ggt-5qdf
26
vulnerability VCID-xamt-2k26-p3ev
27
vulnerability VCID-xjtf-q3gz-7ug8
28
vulnerability VCID-ymw1-gk3r-kfhz
29
vulnerability VCID-yw2r-4rr8-pkfd
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/grub2@2.06-3~deb11u6
aliases CVE-2022-3775
risk_score 3.2
exploitability 0.5
weighted_severity 6.4
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-33ec-pjax-nkak
2
url VCID-6jes-p579-uyg3
vulnerability_id VCID-6jes-p579-uyg3
summary Multiple vulnerabilities have been discovered in GRUB, the worst of which may allow for secureboot bypass.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-28735.json
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-28735.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2022-28735
reference_id
reference_type
scores
0
value 0.00018
scoring_system epss
scoring_elements 0.04654
published_at 2026-04-07T12:55:00Z
1
value 0.00018
scoring_system epss
scoring_elements 0.04617
published_at 2026-04-02T12:55:00Z
2
value 0.00018
scoring_system epss
scoring_elements 0.04642
published_at 2026-04-04T12:55:00Z
3
value 0.00018
scoring_system epss
scoring_elements 0.04688
published_at 2026-04-08T12:55:00Z
4
value 0.00018
scoring_system epss
scoring_elements 0.047
published_at 2026-04-09T12:55:00Z
5
value 0.00018
scoring_system epss
scoring_elements 0.04691
published_at 2026-04-11T12:55:00Z
6
value 0.00018
scoring_system epss
scoring_elements 0.04674
published_at 2026-04-12T12:55:00Z
7
value 0.00018
scoring_system epss
scoring_elements 0.04657
published_at 2026-04-13T12:55:00Z
8
value 0.00018
scoring_system epss
scoring_elements 0.04624
published_at 2026-04-16T12:55:00Z
9
value 0.00018
scoring_system epss
scoring_elements 0.04632
published_at 2026-04-18T12:55:00Z
10
value 0.00019
scoring_system epss
scoring_elements 0.05046
published_at 2026-04-26T12:55:00Z
11
value 0.00019
scoring_system epss
scoring_elements 0.04973
published_at 2026-04-21T12:55:00Z
12
value 0.00019
scoring_system epss
scoring_elements 0.05005
published_at 2026-04-24T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2022-28735
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28735
reference_id
reference_type
scores
0
value 6.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-10-24T19:20:44Z/
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28735
3
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 8.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
4
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1001057
reference_id 1001057
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1001057
5
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2090857
reference_id 2090857
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2090857
6
reference_url https://www.openwall.com/lists/oss-security/2022/06/07/5
reference_id 5
reference_type
scores
0
value 6.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-10-24T19:20:44Z/
url https://www.openwall.com/lists/oss-security/2022/06/07/5
7
reference_url https://security.archlinux.org/AVG-2762
reference_id AVG-2762
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2762
8
reference_url https://security.gentoo.org/glsa/202209-12
reference_id GLSA-202209-12
reference_type
scores
url https://security.gentoo.org/glsa/202209-12
9
reference_url https://security.netapp.com/advisory/ntap-20230825-0002/
reference_id ntap-20230825-0002
reference_type
scores
0
value 6.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-10-24T19:20:44Z/
url https://security.netapp.com/advisory/ntap-20230825-0002/
10
reference_url https://access.redhat.com/errata/RHSA-2022:5095
reference_id RHSA-2022:5095
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:5095
11
reference_url https://access.redhat.com/errata/RHSA-2022:5096
reference_id RHSA-2022:5096
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:5096
12
reference_url https://access.redhat.com/errata/RHSA-2022:5098
reference_id RHSA-2022:5098
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:5098
13
reference_url https://access.redhat.com/errata/RHSA-2022:5099
reference_id RHSA-2022:5099
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:5099
14
reference_url https://access.redhat.com/errata/RHSA-2022:5100
reference_id RHSA-2022:5100
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:5100
15
reference_url https://usn.ubuntu.com/6355-1/
reference_id USN-6355-1
reference_type
scores
url https://usn.ubuntu.com/6355-1/
fixed_packages
0
url pkg:deb/debian/grub2@2.06-3~deb11u2
purl pkg:deb/debian/grub2@2.06-3~deb11u2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-33ec-pjax-nkak
1
vulnerability VCID-8kh4-ym2x-k3he
2
vulnerability VCID-9mut-ye1e-pbdx
3
vulnerability VCID-gjbg-nve3-m3gy
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/grub2@2.06-3~deb11u2
aliases CVE-2022-28735
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-6jes-p579-uyg3
3
url VCID-8kh4-ym2x-k3he
vulnerability_id VCID-8kh4-ym2x-k3he
summary grub2: out-of-bounds read at fs/ntfs.c
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-4693.json
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-4693.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-4693
reference_id
reference_type
scores
0
value 9e-05
scoring_system epss
scoring_elements 0.00935
published_at 2026-04-04T12:55:00Z
1
value 9e-05
scoring_system epss
scoring_elements 0.00939
published_at 2026-04-07T12:55:00Z
2
value 9e-05
scoring_system epss
scoring_elements 0.00942
published_at 2026-04-08T12:55:00Z
3
value 9e-05
scoring_system epss
scoring_elements 0.00938
published_at 2026-04-09T12:55:00Z
4
value 9e-05
scoring_system epss
scoring_elements 0.00927
published_at 2026-04-11T12:55:00Z
5
value 9e-05
scoring_system epss
scoring_elements 0.00922
published_at 2026-04-12T12:55:00Z
6
value 9e-05
scoring_system epss
scoring_elements 0.00924
published_at 2026-04-13T12:55:00Z
7
value 9e-05
scoring_system epss
scoring_elements 0.0092
published_at 2026-04-16T12:55:00Z
8
value 9e-05
scoring_system epss
scoring_elements 0.00928
published_at 2026-04-18T12:55:00Z
9
value 9e-05
scoring_system epss
scoring_elements 0.00979
published_at 2026-04-21T12:55:00Z
10
value 9e-05
scoring_system epss
scoring_elements 0.00981
published_at 2026-04-24T12:55:00Z
11
value 9e-05
scoring_system epss
scoring_elements 0.00985
published_at 2026-04-26T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-4693
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4692
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4692
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4693
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4693
4
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
5
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2238343
reference_id 2238343
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2238343
6
reference_url https://access.redhat.com/errata/RHSA-2024:2456
reference_id RHSA-2024:2456
reference_type
scores
url https://access.redhat.com/errata/RHSA-2024:2456
7
reference_url https://access.redhat.com/errata/RHSA-2024:3184
reference_id RHSA-2024:3184
reference_type
scores
url https://access.redhat.com/errata/RHSA-2024:3184
8
reference_url https://usn.ubuntu.com/6410-1/
reference_id USN-6410-1
reference_type
scores
url https://usn.ubuntu.com/6410-1/
fixed_packages
0
url pkg:deb/debian/grub2@2.06-3~deb11u6
purl pkg:deb/debian/grub2@2.06-3~deb11u6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1tdk-6d8a-m7h8
1
vulnerability VCID-1vtj-un1a-afax
2
vulnerability VCID-29d7-asmu-e7ev
3
vulnerability VCID-3vhv-ya75-cuhc
4
vulnerability VCID-53x3-83by-gueq
5
vulnerability VCID-5a7e-ctj7-dqab
6
vulnerability VCID-5m3u-p8q4-kfhx
7
vulnerability VCID-5m6c-h4j2-mqcg
8
vulnerability VCID-5vyx-ut4z-jucd
9
vulnerability VCID-6cpn-v8j3-7ub3
10
vulnerability VCID-6tg5-6gjc-nygy
11
vulnerability VCID-6vxc-35x2-3fek
12
vulnerability VCID-c2vg-36gb-bqas
13
vulnerability VCID-dn64-5ysd-yfer
14
vulnerability VCID-gaet-924c-57dv
15
vulnerability VCID-h2ca-d9yc-vbex
16
vulnerability VCID-hn4b-sdcq-j3bx
17
vulnerability VCID-nphq-62t2-b7bk
18
vulnerability VCID-pjq7-bxwk-uqec
19
vulnerability VCID-s86w-7czc-s3a9
20
vulnerability VCID-sub1-vd8w-dka7
21
vulnerability VCID-swtj-9pmu-4ugn
22
vulnerability VCID-tkur-tbms-zkcz
23
vulnerability VCID-ur99-cm1x-cfdm
24
vulnerability VCID-wy3p-p9zf-r7ef
25
vulnerability VCID-x57b-4ggt-5qdf
26
vulnerability VCID-xamt-2k26-p3ev
27
vulnerability VCID-xjtf-q3gz-7ug8
28
vulnerability VCID-ymw1-gk3r-kfhz
29
vulnerability VCID-yw2r-4rr8-pkfd
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/grub2@2.06-3~deb11u6
aliases CVE-2023-4693
risk_score 2.4
exploitability 0.5
weighted_severity 4.8
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-8kh4-ym2x-k3he
4
url VCID-8zje-6cet-h3a4
vulnerability_id VCID-8zje-6cet-h3a4
summary Multiple vulnerabilities have been discovered in GRUB, the worst of which may allow for secureboot bypass.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-3695.json
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-3695.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2021-3695
reference_id
reference_type
scores
0
value 0.0006
scoring_system epss
scoring_elements 0.18734
published_at 2026-04-01T12:55:00Z
1
value 0.0006
scoring_system epss
scoring_elements 0.18779
published_at 2026-04-09T12:55:00Z
2
value 0.0006
scoring_system epss
scoring_elements 0.18783
published_at 2026-04-11T12:55:00Z
3
value 0.0006
scoring_system epss
scoring_elements 0.18737
published_at 2026-04-12T12:55:00Z
4
value 0.0006
scoring_system epss
scoring_elements 0.18687
published_at 2026-04-13T12:55:00Z
5
value 0.0006
scoring_system epss
scoring_elements 0.18635
published_at 2026-04-16T12:55:00Z
6
value 0.0006
scoring_system epss
scoring_elements 0.18647
published_at 2026-04-18T12:55:00Z
7
value 0.0006
scoring_system epss
scoring_elements 0.18871
published_at 2026-04-02T12:55:00Z
8
value 0.0006
scoring_system epss
scoring_elements 0.18925
published_at 2026-04-04T12:55:00Z
9
value 0.0006
scoring_system epss
scoring_elements 0.18645
published_at 2026-04-07T12:55:00Z
10
value 0.0006
scoring_system epss
scoring_elements 0.18724
published_at 2026-04-08T12:55:00Z
11
value 0.00061
scoring_system epss
scoring_elements 0.19028
published_at 2026-04-24T12:55:00Z
12
value 0.00061
scoring_system epss
scoring_elements 0.19016
published_at 2026-04-26T12:55:00Z
13
value 0.00061
scoring_system epss
scoring_elements 0.19135
published_at 2026-04-21T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2021-3695
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3695
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3695
3
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
4
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1991685
reference_id 1991685
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1991685
5
reference_url https://security.archlinux.org/AVG-2762
reference_id AVG-2762
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2762
6
reference_url https://security.gentoo.org/glsa/202209-12
reference_id GLSA-202209-12
reference_type
scores
url https://security.gentoo.org/glsa/202209-12
7
reference_url https://access.redhat.com/errata/RHSA-2022:5095
reference_id RHSA-2022:5095
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:5095
8
reference_url https://access.redhat.com/errata/RHSA-2022:5096
reference_id RHSA-2022:5096
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:5096
9
reference_url https://access.redhat.com/errata/RHSA-2022:5098
reference_id RHSA-2022:5098
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:5098
10
reference_url https://access.redhat.com/errata/RHSA-2022:5099
reference_id RHSA-2022:5099
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:5099
11
reference_url https://access.redhat.com/errata/RHSA-2022:5100
reference_id RHSA-2022:5100
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:5100
12
reference_url https://usn.ubuntu.com/6355-1/
reference_id USN-6355-1
reference_type
scores
url https://usn.ubuntu.com/6355-1/
fixed_packages
0
url pkg:deb/debian/grub2@2.06-3~deb11u2
purl pkg:deb/debian/grub2@2.06-3~deb11u2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-33ec-pjax-nkak
1
vulnerability VCID-8kh4-ym2x-k3he
2
vulnerability VCID-9mut-ye1e-pbdx
3
vulnerability VCID-gjbg-nve3-m3gy
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/grub2@2.06-3~deb11u2
aliases CVE-2021-3695
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-8zje-6cet-h3a4
5
url VCID-9dkn-kkgd-37ce
vulnerability_id VCID-9dkn-kkgd-37ce
summary Multiple vulnerabilities have been discovered in GRUB, the worst of which may allow for secureboot bypass.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-28733.json
reference_id
reference_type
scores
0
value 8.1
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-28733.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2022-28733
reference_id
reference_type
scores
0
value 0.00109
scoring_system epss
scoring_elements 0.29308
published_at 2026-04-04T12:55:00Z
1
value 0.00109
scoring_system epss
scoring_elements 0.29258
published_at 2026-04-02T12:55:00Z
2
value 0.00109
scoring_system epss
scoring_elements 0.2912
published_at 2026-04-07T12:55:00Z
3
value 0.00109
scoring_system epss
scoring_elements 0.29185
published_at 2026-04-12T12:55:00Z
4
value 0.00109
scoring_system epss
scoring_elements 0.29226
published_at 2026-04-09T12:55:00Z
5
value 0.00109
scoring_system epss
scoring_elements 0.29231
published_at 2026-04-11T12:55:00Z
6
value 0.00109
scoring_system epss
scoring_elements 0.29133
published_at 2026-04-13T12:55:00Z
7
value 0.00109
scoring_system epss
scoring_elements 0.29158
published_at 2026-04-16T12:55:00Z
8
value 0.00109
scoring_system epss
scoring_elements 0.29135
published_at 2026-04-18T12:55:00Z
9
value 0.00112
scoring_system epss
scoring_elements 0.29477
published_at 2026-04-24T12:55:00Z
10
value 0.00112
scoring_system epss
scoring_elements 0.29363
published_at 2026-04-26T12:55:00Z
11
value 0.00112
scoring_system epss
scoring_elements 0.2957
published_at 2026-04-21T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2022-28733
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28733
reference_id
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-10-24T19:49:29Z/
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28733
3
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
4
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2083339
reference_id 2083339
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2083339
5
reference_url https://www.openwall.com/lists/oss-security/2022/06/07/5
reference_id 5
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-10-24T19:49:29Z/
url https://www.openwall.com/lists/oss-security/2022/06/07/5
6
reference_url https://security.archlinux.org/AVG-2762
reference_id AVG-2762
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2762
7
reference_url https://security.gentoo.org/glsa/202209-12
reference_id GLSA-202209-12
reference_type
scores
url https://security.gentoo.org/glsa/202209-12
8
reference_url https://security.netapp.com/advisory/ntap-20230825-0002/
reference_id ntap-20230825-0002
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-10-24T19:49:29Z/
url https://security.netapp.com/advisory/ntap-20230825-0002/
9
reference_url https://access.redhat.com/errata/RHSA-2022:5095
reference_id RHSA-2022:5095
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:5095
10
reference_url https://access.redhat.com/errata/RHSA-2022:5096
reference_id RHSA-2022:5096
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:5096
11
reference_url https://access.redhat.com/errata/RHSA-2022:5098
reference_id RHSA-2022:5098
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:5098
12
reference_url https://access.redhat.com/errata/RHSA-2022:5099
reference_id RHSA-2022:5099
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:5099
13
reference_url https://access.redhat.com/errata/RHSA-2022:5100
reference_id RHSA-2022:5100
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:5100
14
reference_url https://access.redhat.com/errata/RHSA-2022:5678
reference_id RHSA-2022:5678
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:5678
15
reference_url https://access.redhat.com/errata/RHSA-2022:8900
reference_id RHSA-2022:8900
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:8900
16
reference_url https://usn.ubuntu.com/6355-1/
reference_id USN-6355-1
reference_type
scores
url https://usn.ubuntu.com/6355-1/
fixed_packages
0
url pkg:deb/debian/grub2@2.06-3~deb11u2
purl pkg:deb/debian/grub2@2.06-3~deb11u2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-33ec-pjax-nkak
1
vulnerability VCID-8kh4-ym2x-k3he
2
vulnerability VCID-9mut-ye1e-pbdx
3
vulnerability VCID-gjbg-nve3-m3gy
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/grub2@2.06-3~deb11u2
aliases CVE-2022-28733
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-9dkn-kkgd-37ce
6
url VCID-9mut-ye1e-pbdx
vulnerability_id VCID-9mut-ye1e-pbdx
summary grub2: Out-of-bounds write at fs/ntfs.c may lead to unsigned code execution
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-4692.json
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-4692.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-4692
reference_id
reference_type
scores
0
value 4e-05
scoring_system epss
scoring_elements 0.00169
published_at 2026-04-26T12:55:00Z
1
value 4e-05
scoring_system epss
scoring_elements 0.00161
published_at 2026-04-02T12:55:00Z
2
value 4e-05
scoring_system epss
scoring_elements 0.00163
published_at 2026-04-09T12:55:00Z
3
value 4e-05
scoring_system epss
scoring_elements 0.00165
published_at 2026-04-16T12:55:00Z
4
value 4e-05
scoring_system epss
scoring_elements 0.00164
published_at 2026-04-13T12:55:00Z
5
value 4e-05
scoring_system epss
scoring_elements 0.00166
published_at 2026-04-18T12:55:00Z
6
value 4e-05
scoring_system epss
scoring_elements 0.00168
published_at 2026-04-21T12:55:00Z
7
value 4e-05
scoring_system epss
scoring_elements 0.0017
published_at 2026-04-24T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-4692
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4692
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4692
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4693
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4693
4
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
5
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2236613
reference_id 2236613
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
1
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:T/P:M/B:A/M:M/D:R/2025-08-15T14:23:06Z/
url https://bugzilla.redhat.com/show_bug.cgi?id=2236613
6
reference_url https://seclists.org/oss-sec/2023/q4/37
reference_id 37
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
1
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:T/P:M/B:A/M:M/D:R/2025-08-15T14:23:06Z/
url https://seclists.org/oss-sec/2023/q4/37
7
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:enterprise_linux:7
reference_id cpe:/o:redhat:enterprise_linux:7
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:enterprise_linux:7
8
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:enterprise_linux:8::baseos
reference_id cpe:/o:redhat:enterprise_linux:8::baseos
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:enterprise_linux:8::baseos
9
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:enterprise_linux:9::baseos
reference_id cpe:/o:redhat:enterprise_linux:9::baseos
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:enterprise_linux:9::baseos
10
reference_url https://access.redhat.com/security/cve/CVE-2023-4692
reference_id CVE-2023-4692
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
1
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:T/P:M/B:A/M:M/D:R/2025-08-15T14:23:06Z/
url https://access.redhat.com/security/cve/CVE-2023-4692
11
reference_url https://dfir.ru/2023/10/03/cve-2023-4692-cve-2023-4693-vulnerabilities-in-the-grub-boot-manager/
reference_id cve-2023-4692-cve-2023-4693-vulnerabilities-in-the-grub-boot-manager
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
1
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:T/P:M/B:A/M:M/D:R/2025-08-15T14:23:06Z/
url https://dfir.ru/2023/10/03/cve-2023-4692-cve-2023-4693-vulnerabilities-in-the-grub-boot-manager/
12
reference_url https://lists.gnu.org/archive/html/grub-devel/2023-10/msg00028.html
reference_id msg00028.html
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
1
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:T/P:M/B:A/M:M/D:R/2025-08-15T14:23:06Z/
url https://lists.gnu.org/archive/html/grub-devel/2023-10/msg00028.html
13
reference_url https://access.redhat.com/errata/RHSA-2024:2456
reference_id RHSA-2024:2456
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
1
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:T/P:M/B:A/M:M/D:R/2025-08-15T14:23:06Z/
url https://access.redhat.com/errata/RHSA-2024:2456
14
reference_url https://access.redhat.com/errata/RHSA-2024:3184
reference_id RHSA-2024:3184
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
1
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:T/P:M/B:A/M:M/D:R/2025-08-15T14:23:06Z/
url https://access.redhat.com/errata/RHSA-2024:3184
15
reference_url https://usn.ubuntu.com/6410-1/
reference_id USN-6410-1
reference_type
scores
url https://usn.ubuntu.com/6410-1/
fixed_packages
0
url pkg:deb/debian/grub2@2.06-3~deb11u6
purl pkg:deb/debian/grub2@2.06-3~deb11u6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1tdk-6d8a-m7h8
1
vulnerability VCID-1vtj-un1a-afax
2
vulnerability VCID-29d7-asmu-e7ev
3
vulnerability VCID-3vhv-ya75-cuhc
4
vulnerability VCID-53x3-83by-gueq
5
vulnerability VCID-5a7e-ctj7-dqab
6
vulnerability VCID-5m3u-p8q4-kfhx
7
vulnerability VCID-5m6c-h4j2-mqcg
8
vulnerability VCID-5vyx-ut4z-jucd
9
vulnerability VCID-6cpn-v8j3-7ub3
10
vulnerability VCID-6tg5-6gjc-nygy
11
vulnerability VCID-6vxc-35x2-3fek
12
vulnerability VCID-c2vg-36gb-bqas
13
vulnerability VCID-dn64-5ysd-yfer
14
vulnerability VCID-gaet-924c-57dv
15
vulnerability VCID-h2ca-d9yc-vbex
16
vulnerability VCID-hn4b-sdcq-j3bx
17
vulnerability VCID-nphq-62t2-b7bk
18
vulnerability VCID-pjq7-bxwk-uqec
19
vulnerability VCID-s86w-7czc-s3a9
20
vulnerability VCID-sub1-vd8w-dka7
21
vulnerability VCID-swtj-9pmu-4ugn
22
vulnerability VCID-tkur-tbms-zkcz
23
vulnerability VCID-ur99-cm1x-cfdm
24
vulnerability VCID-wy3p-p9zf-r7ef
25
vulnerability VCID-x57b-4ggt-5qdf
26
vulnerability VCID-xamt-2k26-p3ev
27
vulnerability VCID-xjtf-q3gz-7ug8
28
vulnerability VCID-ymw1-gk3r-kfhz
29
vulnerability VCID-yw2r-4rr8-pkfd
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/grub2@2.06-3~deb11u6
aliases CVE-2023-4692
risk_score 3.4
exploitability 0.5
weighted_severity 6.8
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-9mut-ye1e-pbdx
7
url VCID-g3tz-5rzv-wkgk
vulnerability_id VCID-g3tz-5rzv-wkgk
summary Multiple vulnerabilities have been discovered in GRUB, the worst of which may allow for secureboot bypass.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-28734.json
reference_id
reference_type
scores
0
value 7.0
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-28734.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2022-28734
reference_id
reference_type
scores
0
value 0.00127
scoring_system epss
scoring_elements 0.3177
published_at 2026-04-26T12:55:00Z
1
value 0.00127
scoring_system epss
scoring_elements 0.32062
published_at 2026-04-21T12:55:00Z
2
value 0.00127
scoring_system epss
scoring_elements 0.31897
published_at 2026-04-24T12:55:00Z
3
value 0.00141
scoring_system epss
scoring_elements 0.34429
published_at 2026-04-02T12:55:00Z
4
value 0.00141
scoring_system epss
scoring_elements 0.34324
published_at 2026-04-07T12:55:00Z
5
value 0.00141
scoring_system epss
scoring_elements 0.34367
published_at 2026-04-08T12:55:00Z
6
value 0.00141
scoring_system epss
scoring_elements 0.34396
published_at 2026-04-09T12:55:00Z
7
value 0.00141
scoring_system epss
scoring_elements 0.34399
published_at 2026-04-11T12:55:00Z
8
value 0.00141
scoring_system epss
scoring_elements 0.34359
published_at 2026-04-12T12:55:00Z
9
value 0.00141
scoring_system epss
scoring_elements 0.34336
published_at 2026-04-13T12:55:00Z
10
value 0.00141
scoring_system epss
scoring_elements 0.3437
published_at 2026-04-16T12:55:00Z
11
value 0.00141
scoring_system epss
scoring_elements 0.34357
published_at 2026-04-18T12:55:00Z
12
value 0.00141
scoring_system epss
scoring_elements 0.34457
published_at 2026-04-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2022-28734
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28734
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28734
3
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
4
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2090463
reference_id 2090463
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2090463
5
reference_url https://security.archlinux.org/AVG-2762
reference_id AVG-2762
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2762
6
reference_url https://security.gentoo.org/glsa/202209-12
reference_id GLSA-202209-12
reference_type
scores
url https://security.gentoo.org/glsa/202209-12
7
reference_url https://access.redhat.com/errata/RHSA-2022:5095
reference_id RHSA-2022:5095
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:5095
8
reference_url https://access.redhat.com/errata/RHSA-2022:5096
reference_id RHSA-2022:5096
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:5096
9
reference_url https://access.redhat.com/errata/RHSA-2022:5098
reference_id RHSA-2022:5098
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:5098
10
reference_url https://access.redhat.com/errata/RHSA-2022:5099
reference_id RHSA-2022:5099
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:5099
11
reference_url https://access.redhat.com/errata/RHSA-2022:5100
reference_id RHSA-2022:5100
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:5100
12
reference_url https://usn.ubuntu.com/6355-1/
reference_id USN-6355-1
reference_type
scores
url https://usn.ubuntu.com/6355-1/
fixed_packages
0
url pkg:deb/debian/grub2@2.06-3~deb11u2
purl pkg:deb/debian/grub2@2.06-3~deb11u2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-33ec-pjax-nkak
1
vulnerability VCID-8kh4-ym2x-k3he
2
vulnerability VCID-9mut-ye1e-pbdx
3
vulnerability VCID-gjbg-nve3-m3gy
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/grub2@2.06-3~deb11u2
aliases CVE-2022-28734
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-g3tz-5rzv-wkgk
8
url VCID-gjbg-nve3-m3gy
vulnerability_id VCID-gjbg-nve3-m3gy
summary Multiple vulnerabilities have been discoverd in GRUB, which may lead to secure boot circumvention or code execution.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-2601.json
reference_id
reference_type
scores
0
value 8.2
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-2601.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2022-2601
reference_id
reference_type
scores
0
value 0.00063
scoring_system epss
scoring_elements 0.19708
published_at 2026-04-02T12:55:00Z
1
value 0.00063
scoring_system epss
scoring_elements 0.19757
published_at 2026-04-04T12:55:00Z
2
value 0.00063
scoring_system epss
scoring_elements 0.19481
published_at 2026-04-07T12:55:00Z
3
value 0.00063
scoring_system epss
scoring_elements 0.1956
published_at 2026-04-08T12:55:00Z
4
value 0.00063
scoring_system epss
scoring_elements 0.19613
published_at 2026-04-09T12:55:00Z
5
value 0.00063
scoring_system epss
scoring_elements 0.19617
published_at 2026-04-11T12:55:00Z
6
value 0.00063
scoring_system epss
scoring_elements 0.19569
published_at 2026-04-12T12:55:00Z
7
value 0.00063
scoring_system epss
scoring_elements 0.1951
published_at 2026-04-13T12:55:00Z
8
value 0.00067
scoring_system epss
scoring_elements 0.2065
published_at 2026-04-16T12:55:00Z
9
value 0.00067
scoring_system epss
scoring_elements 0.20648
published_at 2026-04-18T12:55:00Z
10
value 0.00069
scoring_system epss
scoring_elements 0.21004
published_at 2026-04-26T12:55:00Z
11
value 0.00069
scoring_system epss
scoring_elements 0.21128
published_at 2026-04-21T12:55:00Z
12
value 0.00069
scoring_system epss
scoring_elements 0.20999
published_at 2026-04-24T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2022-2601
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2601
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2601
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3775
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3775
4
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 6.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
5
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2112975
reference_id 2112975
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2112975
6
reference_url https://security.gentoo.org/glsa/202311-14
reference_id GLSA-202311-14
reference_type
scores
url https://security.gentoo.org/glsa/202311-14
7
reference_url https://access.redhat.com/errata/RHSA-2022:8494
reference_id RHSA-2022:8494
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:8494
8
reference_url https://access.redhat.com/errata/RHSA-2022:8800
reference_id RHSA-2022:8800
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:8800
9
reference_url https://access.redhat.com/errata/RHSA-2022:8978
reference_id RHSA-2022:8978
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:8978
10
reference_url https://access.redhat.com/errata/RHSA-2023:0047
reference_id RHSA-2023:0047
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:0047
11
reference_url https://access.redhat.com/errata/RHSA-2023:0048
reference_id RHSA-2023:0048
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:0048
12
reference_url https://access.redhat.com/errata/RHSA-2023:0049
reference_id RHSA-2023:0049
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:0049
13
reference_url https://access.redhat.com/errata/RHSA-2023:0752
reference_id RHSA-2023:0752
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:0752
14
reference_url https://access.redhat.com/errata/RHSA-2024:2002
reference_id RHSA-2024:2002
reference_type
scores
url https://access.redhat.com/errata/RHSA-2024:2002
fixed_packages
0
url pkg:deb/debian/grub2@2.06-3~deb11u6
purl pkg:deb/debian/grub2@2.06-3~deb11u6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1tdk-6d8a-m7h8
1
vulnerability VCID-1vtj-un1a-afax
2
vulnerability VCID-29d7-asmu-e7ev
3
vulnerability VCID-3vhv-ya75-cuhc
4
vulnerability VCID-53x3-83by-gueq
5
vulnerability VCID-5a7e-ctj7-dqab
6
vulnerability VCID-5m3u-p8q4-kfhx
7
vulnerability VCID-5m6c-h4j2-mqcg
8
vulnerability VCID-5vyx-ut4z-jucd
9
vulnerability VCID-6cpn-v8j3-7ub3
10
vulnerability VCID-6tg5-6gjc-nygy
11
vulnerability VCID-6vxc-35x2-3fek
12
vulnerability VCID-c2vg-36gb-bqas
13
vulnerability VCID-dn64-5ysd-yfer
14
vulnerability VCID-gaet-924c-57dv
15
vulnerability VCID-h2ca-d9yc-vbex
16
vulnerability VCID-hn4b-sdcq-j3bx
17
vulnerability VCID-nphq-62t2-b7bk
18
vulnerability VCID-pjq7-bxwk-uqec
19
vulnerability VCID-s86w-7czc-s3a9
20
vulnerability VCID-sub1-vd8w-dka7
21
vulnerability VCID-swtj-9pmu-4ugn
22
vulnerability VCID-tkur-tbms-zkcz
23
vulnerability VCID-ur99-cm1x-cfdm
24
vulnerability VCID-wy3p-p9zf-r7ef
25
vulnerability VCID-x57b-4ggt-5qdf
26
vulnerability VCID-xamt-2k26-p3ev
27
vulnerability VCID-xjtf-q3gz-7ug8
28
vulnerability VCID-ymw1-gk3r-kfhz
29
vulnerability VCID-yw2r-4rr8-pkfd
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/grub2@2.06-3~deb11u6
aliases CVE-2022-2601
risk_score 3.7
exploitability 0.5
weighted_severity 7.4
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-gjbg-nve3-m3gy
9
url VCID-nn2e-jq31-n7bc
vulnerability_id VCID-nn2e-jq31-n7bc
summary Multiple vulnerabilities have been discovered in GRUB, the worst of which may allow for secureboot bypass.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-3696.json
reference_id
reference_type
scores
0
value 5.0
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:L
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-3696.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2021-3696
reference_id
reference_type
scores
0
value 0.00114
scoring_system epss
scoring_elements 0.29993
published_at 2026-04-01T12:55:00Z
1
value 0.00114
scoring_system epss
scoring_elements 0.2999
published_at 2026-04-09T12:55:00Z
2
value 0.00114
scoring_system epss
scoring_elements 0.29995
published_at 2026-04-11T12:55:00Z
3
value 0.00114
scoring_system epss
scoring_elements 0.29949
published_at 2026-04-12T12:55:00Z
4
value 0.00114
scoring_system epss
scoring_elements 0.299
published_at 2026-04-13T12:55:00Z
5
value 0.00114
scoring_system epss
scoring_elements 0.29917
published_at 2026-04-16T12:55:00Z
6
value 0.00114
scoring_system epss
scoring_elements 0.29897
published_at 2026-04-18T12:55:00Z
7
value 0.00114
scoring_system epss
scoring_elements 0.30033
published_at 2026-04-02T12:55:00Z
8
value 0.00114
scoring_system epss
scoring_elements 0.3008
published_at 2026-04-04T12:55:00Z
9
value 0.00114
scoring_system epss
scoring_elements 0.29893
published_at 2026-04-07T12:55:00Z
10
value 0.00114
scoring_system epss
scoring_elements 0.29954
published_at 2026-04-08T12:55:00Z
11
value 0.00117
scoring_system epss
scoring_elements 0.30252
published_at 2026-04-24T12:55:00Z
12
value 0.00117
scoring_system epss
scoring_elements 0.30138
published_at 2026-04-26T12:55:00Z
13
value 0.00117
scoring_system epss
scoring_elements 0.30313
published_at 2026-04-21T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2021-3696
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3696
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3696
3
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:L
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
4
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1991686
reference_id 1991686
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1991686
5
reference_url https://security.archlinux.org/AVG-2762
reference_id AVG-2762
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2762
6
reference_url https://security.gentoo.org/glsa/202209-12
reference_id GLSA-202209-12
reference_type
scores
url https://security.gentoo.org/glsa/202209-12
7
reference_url https://access.redhat.com/errata/RHSA-2022:5095
reference_id RHSA-2022:5095
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:5095
8
reference_url https://access.redhat.com/errata/RHSA-2022:5096
reference_id RHSA-2022:5096
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:5096
9
reference_url https://access.redhat.com/errata/RHSA-2022:5098
reference_id RHSA-2022:5098
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:5098
10
reference_url https://access.redhat.com/errata/RHSA-2022:5099
reference_id RHSA-2022:5099
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:5099
11
reference_url https://access.redhat.com/errata/RHSA-2022:5100
reference_id RHSA-2022:5100
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:5100
12
reference_url https://usn.ubuntu.com/6355-1/
reference_id USN-6355-1
reference_type
scores
url https://usn.ubuntu.com/6355-1/
fixed_packages
0
url pkg:deb/debian/grub2@2.06-3~deb11u2
purl pkg:deb/debian/grub2@2.06-3~deb11u2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-33ec-pjax-nkak
1
vulnerability VCID-8kh4-ym2x-k3he
2
vulnerability VCID-9mut-ye1e-pbdx
3
vulnerability VCID-gjbg-nve3-m3gy
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/grub2@2.06-3~deb11u2
aliases CVE-2021-3696
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-nn2e-jq31-n7bc
10
url VCID-wp1a-2ueg-mych
vulnerability_id VCID-wp1a-2ueg-mych
summary Multiple vulnerabilities have been discovered in GRUB, the worst of which may allow for secureboot bypass.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-28736.json
reference_id
reference_type
scores
0
value 7.0
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-28736.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2022-28736
reference_id
reference_type
scores
0
value 0.00032
scoring_system epss
scoring_elements 0.092
published_at 2026-04-04T12:55:00Z
1
value 0.00032
scoring_system epss
scoring_elements 0.09147
published_at 2026-04-02T12:55:00Z
2
value 0.00032
scoring_system epss
scoring_elements 0.09124
published_at 2026-04-07T12:55:00Z
3
value 0.00032
scoring_system epss
scoring_elements 0.09204
published_at 2026-04-12T12:55:00Z
4
value 0.00032
scoring_system epss
scoring_elements 0.09233
published_at 2026-04-09T12:55:00Z
5
value 0.00032
scoring_system epss
scoring_elements 0.09236
published_at 2026-04-11T12:55:00Z
6
value 0.00032
scoring_system epss
scoring_elements 0.0919
published_at 2026-04-13T12:55:00Z
7
value 0.00032
scoring_system epss
scoring_elements 0.09085
published_at 2026-04-16T12:55:00Z
8
value 0.00032
scoring_system epss
scoring_elements 0.09066
published_at 2026-04-18T12:55:00Z
9
value 0.00033
scoring_system epss
scoring_elements 0.09592
published_at 2026-04-24T12:55:00Z
10
value 0.00033
scoring_system epss
scoring_elements 0.09558
published_at 2026-04-26T12:55:00Z
11
value 0.00033
scoring_system epss
scoring_elements 0.09545
published_at 2026-04-21T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2022-28736
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28736
reference_id
reference_type
scores
0
value 6.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-10-24T18:53:03Z/
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28736
3
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 8.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
4
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2092613
reference_id 2092613
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2092613
5
reference_url https://www.openwall.com/lists/oss-security/2022/06/07/5
reference_id 5
reference_type
scores
0
value 6.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-10-24T18:53:03Z/
url https://www.openwall.com/lists/oss-security/2022/06/07/5
6
reference_url https://security.archlinux.org/AVG-2762
reference_id AVG-2762
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2762
7
reference_url https://security.gentoo.org/glsa/202209-12
reference_id GLSA-202209-12
reference_type
scores
url https://security.gentoo.org/glsa/202209-12
8
reference_url https://security.netapp.com/advisory/ntap-20230825-0002/
reference_id ntap-20230825-0002
reference_type
scores
0
value 6.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-10-24T18:53:03Z/
url https://security.netapp.com/advisory/ntap-20230825-0002/
9
reference_url https://access.redhat.com/errata/RHSA-2022:5095
reference_id RHSA-2022:5095
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:5095
10
reference_url https://access.redhat.com/errata/RHSA-2022:5096
reference_id RHSA-2022:5096
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:5096
11
reference_url https://access.redhat.com/errata/RHSA-2022:5098
reference_id RHSA-2022:5098
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:5098
12
reference_url https://access.redhat.com/errata/RHSA-2022:5099
reference_id RHSA-2022:5099
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:5099
13
reference_url https://access.redhat.com/errata/RHSA-2022:5100
reference_id RHSA-2022:5100
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:5100
14
reference_url https://usn.ubuntu.com/6355-1/
reference_id USN-6355-1
reference_type
scores
url https://usn.ubuntu.com/6355-1/
fixed_packages
0
url pkg:deb/debian/grub2@2.06-3~deb11u2
purl pkg:deb/debian/grub2@2.06-3~deb11u2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-33ec-pjax-nkak
1
vulnerability VCID-8kh4-ym2x-k3he
2
vulnerability VCID-9mut-ye1e-pbdx
3
vulnerability VCID-gjbg-nve3-m3gy
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/grub2@2.06-3~deb11u2
aliases CVE-2022-28736
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-wp1a-2ueg-mych
Fixing_vulnerabilities
0
url VCID-744c-pb2n-5kf4
vulnerability_id VCID-744c-pb2n-5kf4
summary
Multiple vulnerabilities have been found in GRUB, the worst might
    allow for circumvention of UEFI Secure Boot.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-20225.json
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-20225.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2021-20225
reference_id
reference_type
scores
0
value 0.0007
scoring_system epss
scoring_elements 0.21354
published_at 2026-04-01T12:55:00Z
1
value 0.0007
scoring_system epss
scoring_elements 0.21473
published_at 2026-04-09T12:55:00Z
2
value 0.0007
scoring_system epss
scoring_elements 0.21389
published_at 2026-04-13T12:55:00Z
3
value 0.0007
scoring_system epss
scoring_elements 0.21385
published_at 2026-04-16T12:55:00Z
4
value 0.0007
scoring_system epss
scoring_elements 0.21392
published_at 2026-04-18T12:55:00Z
5
value 0.0007
scoring_system epss
scoring_elements 0.21359
published_at 2026-04-21T12:55:00Z
6
value 0.0007
scoring_system epss
scoring_elements 0.2152
published_at 2026-04-02T12:55:00Z
7
value 0.0007
scoring_system epss
scoring_elements 0.21579
published_at 2026-04-04T12:55:00Z
8
value 0.0007
scoring_system epss
scoring_elements 0.21334
published_at 2026-04-07T12:55:00Z
9
value 0.0007
scoring_system epss
scoring_elements 0.21412
published_at 2026-04-08T12:55:00Z
10
value 0.0007
scoring_system epss
scoring_elements 0.21485
published_at 2026-04-11T12:55:00Z
11
value 0.0007
scoring_system epss
scoring_elements 0.21446
published_at 2026-04-12T12:55:00Z
12
value 0.00076
scoring_system epss
scoring_elements 0.22545
published_at 2026-04-26T12:55:00Z
13
value 0.00076
scoring_system epss
scoring_elements 0.22554
published_at 2026-04-24T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2021-20225
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14372
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14372
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25632
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25632
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25647
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25647
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-27749
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-27749
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-27779
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-27779
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20225
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20225
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20233
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20233
9
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
10
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1924696
reference_id 1924696
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1924696
11
reference_url https://security.archlinux.org/ASA-202106-43
reference_id ASA-202106-43
reference_type
scores
url https://security.archlinux.org/ASA-202106-43
12
reference_url https://security.archlinux.org/AVG-1629
reference_id AVG-1629
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-1629
13
reference_url https://security.gentoo.org/glsa/202104-05
reference_id GLSA-202104-05
reference_type
scores
url https://security.gentoo.org/glsa/202104-05
14
reference_url https://access.redhat.com/errata/RHSA-2021:0696
reference_id RHSA-2021:0696
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:0696
15
reference_url https://access.redhat.com/errata/RHSA-2021:0697
reference_id RHSA-2021:0697
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:0697
16
reference_url https://access.redhat.com/errata/RHSA-2021:0698
reference_id RHSA-2021:0698
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:0698
17
reference_url https://access.redhat.com/errata/RHSA-2021:0699
reference_id RHSA-2021:0699
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:0699
18
reference_url https://access.redhat.com/errata/RHSA-2021:0700
reference_id RHSA-2021:0700
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:0700
19
reference_url https://access.redhat.com/errata/RHSA-2021:0701
reference_id RHSA-2021:0701
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:0701
20
reference_url https://access.redhat.com/errata/RHSA-2021:0702
reference_id RHSA-2021:0702
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:0702
21
reference_url https://access.redhat.com/errata/RHSA-2021:0703
reference_id RHSA-2021:0703
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:0703
22
reference_url https://access.redhat.com/errata/RHSA-2021:0704
reference_id RHSA-2021:0704
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:0704
23
reference_url https://access.redhat.com/errata/RHSA-2021:1734
reference_id RHSA-2021:1734
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:1734
24
reference_url https://access.redhat.com/errata/RHSA-2021:2566
reference_id RHSA-2021:2566
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:2566
25
reference_url https://access.redhat.com/errata/RHSA-2021:2790
reference_id RHSA-2021:2790
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:2790
26
reference_url https://access.redhat.com/errata/RHSA-2021:3675
reference_id RHSA-2021:3675
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:3675
27
reference_url https://usn.ubuntu.com/4992-1/
reference_id USN-4992-1
reference_type
scores
url https://usn.ubuntu.com/4992-1/
fixed_packages
0
url pkg:deb/debian/grub2@2.04-12
purl pkg:deb/debian/grub2@2.04-12
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2f6m-msj2-2fgy
1
vulnerability VCID-33ec-pjax-nkak
2
vulnerability VCID-6jes-p579-uyg3
3
vulnerability VCID-744c-pb2n-5kf4
4
vulnerability VCID-8axp-fasm-8ka4
5
vulnerability VCID-8kh4-ym2x-k3he
6
vulnerability VCID-8zje-6cet-h3a4
7
vulnerability VCID-9dkn-kkgd-37ce
8
vulnerability VCID-9mut-ye1e-pbdx
9
vulnerability VCID-f6ad-7qb1-9bcd
10
vulnerability VCID-g3tz-5rzv-wkgk
11
vulnerability VCID-gjbg-nve3-m3gy
12
vulnerability VCID-m4y5-twzm-dqcw
13
vulnerability VCID-m5vd-4m54-6ygc
14
vulnerability VCID-nn2e-jq31-n7bc
15
vulnerability VCID-uqg4-wh5j-6ud1
16
vulnerability VCID-v98w-vw6u-dyb3
17
vulnerability VCID-wp1a-2ueg-mych
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/grub2@2.04-12
1
url pkg:deb/debian/grub2@2.06-2
purl pkg:deb/debian/grub2@2.06-2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2f6m-msj2-2fgy
1
vulnerability VCID-33ec-pjax-nkak
2
vulnerability VCID-6jes-p579-uyg3
3
vulnerability VCID-8kh4-ym2x-k3he
4
vulnerability VCID-8zje-6cet-h3a4
5
vulnerability VCID-9dkn-kkgd-37ce
6
vulnerability VCID-9mut-ye1e-pbdx
7
vulnerability VCID-g3tz-5rzv-wkgk
8
vulnerability VCID-gjbg-nve3-m3gy
9
vulnerability VCID-nn2e-jq31-n7bc
10
vulnerability VCID-wp1a-2ueg-mych
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/grub2@2.06-2
aliases CVE-2021-20225
risk_score 3.4
exploitability 0.5
weighted_severity 6.8
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-744c-pb2n-5kf4
1
url VCID-8axp-fasm-8ka4
vulnerability_id VCID-8axp-fasm-8ka4
summary
Multiple vulnerabilities have been found in GRUB, the worst might
    allow for circumvention of UEFI Secure Boot.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-27779.json
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-27779.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2020-27779
reference_id
reference_type
scores
0
value 0.00016
scoring_system epss
scoring_elements 0.03629
published_at 2026-04-26T12:55:00Z
1
value 0.00016
scoring_system epss
scoring_elements 0.03505
published_at 2026-04-13T12:55:00Z
2
value 0.00016
scoring_system epss
scoring_elements 0.0348
published_at 2026-04-16T12:55:00Z
3
value 0.00016
scoring_system epss
scoring_elements 0.03492
published_at 2026-04-18T12:55:00Z
4
value 0.00016
scoring_system epss
scoring_elements 0.03618
published_at 2026-04-21T12:55:00Z
5
value 0.00016
scoring_system epss
scoring_elements 0.03625
published_at 2026-04-24T12:55:00Z
6
value 0.00016
scoring_system epss
scoring_elements 0.03579
published_at 2026-04-07T12:55:00Z
7
value 0.00016
scoring_system epss
scoring_elements 0.03581
published_at 2026-04-08T12:55:00Z
8
value 0.00016
scoring_system epss
scoring_elements 0.03603
published_at 2026-04-09T12:55:00Z
9
value 0.00016
scoring_system epss
scoring_elements 0.03559
published_at 2026-04-11T12:55:00Z
10
value 0.00016
scoring_system epss
scoring_elements 0.0353
published_at 2026-04-12T12:55:00Z
11
value 0.0002
scoring_system epss
scoring_elements 0.05398
published_at 2026-04-02T12:55:00Z
12
value 0.0002
scoring_system epss
scoring_elements 0.05431
published_at 2026-04-04T12:55:00Z
13
value 0.0002
scoring_system epss
scoring_elements 0.05358
published_at 2026-04-01T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2020-27779
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14372
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14372
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25632
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25632
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25647
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25647
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-27749
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-27749
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-27779
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-27779
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20225
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20225
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20233
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20233
9
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
10
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1900698
reference_id 1900698
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1900698
11
reference_url https://security.archlinux.org/ASA-202106-43
reference_id ASA-202106-43
reference_type
scores
url https://security.archlinux.org/ASA-202106-43
12
reference_url https://security.archlinux.org/AVG-1629
reference_id AVG-1629
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-1629
13
reference_url https://security.gentoo.org/glsa/202104-05
reference_id GLSA-202104-05
reference_type
scores
url https://security.gentoo.org/glsa/202104-05
14
reference_url https://access.redhat.com/errata/RHSA-2021:0696
reference_id RHSA-2021:0696
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:0696
15
reference_url https://access.redhat.com/errata/RHSA-2021:0697
reference_id RHSA-2021:0697
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:0697
16
reference_url https://access.redhat.com/errata/RHSA-2021:0698
reference_id RHSA-2021:0698
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:0698
17
reference_url https://access.redhat.com/errata/RHSA-2021:0699
reference_id RHSA-2021:0699
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:0699
18
reference_url https://access.redhat.com/errata/RHSA-2021:0700
reference_id RHSA-2021:0700
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:0700
19
reference_url https://access.redhat.com/errata/RHSA-2021:0701
reference_id RHSA-2021:0701
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:0701
20
reference_url https://access.redhat.com/errata/RHSA-2021:0702
reference_id RHSA-2021:0702
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:0702
21
reference_url https://access.redhat.com/errata/RHSA-2021:0703
reference_id RHSA-2021:0703
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:0703
22
reference_url https://access.redhat.com/errata/RHSA-2021:0704
reference_id RHSA-2021:0704
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:0704
23
reference_url https://access.redhat.com/errata/RHSA-2021:1734
reference_id RHSA-2021:1734
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:1734
24
reference_url https://access.redhat.com/errata/RHSA-2021:2566
reference_id RHSA-2021:2566
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:2566
25
reference_url https://access.redhat.com/errata/RHSA-2021:2790
reference_id RHSA-2021:2790
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:2790
26
reference_url https://access.redhat.com/errata/RHSA-2021:3675
reference_id RHSA-2021:3675
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:3675
27
reference_url https://usn.ubuntu.com/4992-1/
reference_id USN-4992-1
reference_type
scores
url https://usn.ubuntu.com/4992-1/
fixed_packages
0
url pkg:deb/debian/grub2@2.04-12
purl pkg:deb/debian/grub2@2.04-12
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2f6m-msj2-2fgy
1
vulnerability VCID-33ec-pjax-nkak
2
vulnerability VCID-6jes-p579-uyg3
3
vulnerability VCID-744c-pb2n-5kf4
4
vulnerability VCID-8axp-fasm-8ka4
5
vulnerability VCID-8kh4-ym2x-k3he
6
vulnerability VCID-8zje-6cet-h3a4
7
vulnerability VCID-9dkn-kkgd-37ce
8
vulnerability VCID-9mut-ye1e-pbdx
9
vulnerability VCID-f6ad-7qb1-9bcd
10
vulnerability VCID-g3tz-5rzv-wkgk
11
vulnerability VCID-gjbg-nve3-m3gy
12
vulnerability VCID-m4y5-twzm-dqcw
13
vulnerability VCID-m5vd-4m54-6ygc
14
vulnerability VCID-nn2e-jq31-n7bc
15
vulnerability VCID-uqg4-wh5j-6ud1
16
vulnerability VCID-v98w-vw6u-dyb3
17
vulnerability VCID-wp1a-2ueg-mych
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/grub2@2.04-12
1
url pkg:deb/debian/grub2@2.06-2
purl pkg:deb/debian/grub2@2.06-2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2f6m-msj2-2fgy
1
vulnerability VCID-33ec-pjax-nkak
2
vulnerability VCID-6jes-p579-uyg3
3
vulnerability VCID-8kh4-ym2x-k3he
4
vulnerability VCID-8zje-6cet-h3a4
5
vulnerability VCID-9dkn-kkgd-37ce
6
vulnerability VCID-9mut-ye1e-pbdx
7
vulnerability VCID-g3tz-5rzv-wkgk
8
vulnerability VCID-gjbg-nve3-m3gy
9
vulnerability VCID-nn2e-jq31-n7bc
10
vulnerability VCID-wp1a-2ueg-mych
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/grub2@2.06-2
aliases CVE-2020-27779
risk_score 3.4
exploitability 0.5
weighted_severity 6.8
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-8axp-fasm-8ka4
2
url VCID-f6ad-7qb1-9bcd
vulnerability_id VCID-f6ad-7qb1-9bcd
summary
Multiple vulnerabilities have been found in GRUB, the worst might
    allow for circumvention of UEFI Secure Boot.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-20233.json
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-20233.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2021-20233
reference_id
reference_type
scores
0
value 0.00173
scoring_system epss
scoring_elements 0.38614
published_at 2026-04-01T12:55:00Z
1
value 0.00173
scoring_system epss
scoring_elements 0.38756
published_at 2026-04-09T12:55:00Z
2
value 0.00173
scoring_system epss
scoring_elements 0.38705
published_at 2026-04-13T12:55:00Z
3
value 0.00173
scoring_system epss
scoring_elements 0.38751
published_at 2026-04-16T12:55:00Z
4
value 0.00173
scoring_system epss
scoring_elements 0.38729
published_at 2026-04-18T12:55:00Z
5
value 0.00173
scoring_system epss
scoring_elements 0.3865
published_at 2026-04-21T12:55:00Z
6
value 0.00173
scoring_system epss
scoring_elements 0.38744
published_at 2026-04-02T12:55:00Z
7
value 0.00173
scoring_system epss
scoring_elements 0.38766
published_at 2026-04-04T12:55:00Z
8
value 0.00173
scoring_system epss
scoring_elements 0.38695
published_at 2026-04-07T12:55:00Z
9
value 0.00173
scoring_system epss
scoring_elements 0.38745
published_at 2026-04-08T12:55:00Z
10
value 0.00173
scoring_system epss
scoring_elements 0.38769
published_at 2026-04-11T12:55:00Z
11
value 0.00173
scoring_system epss
scoring_elements 0.38732
published_at 2026-04-12T12:55:00Z
12
value 0.00188
scoring_system epss
scoring_elements 0.40484
published_at 2026-04-26T12:55:00Z
13
value 0.00188
scoring_system epss
scoring_elements 0.40497
published_at 2026-04-24T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2021-20233
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14372
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14372
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25632
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25632
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25647
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25647
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-27749
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-27749
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-27779
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-27779
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20225
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20225
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20233
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20233
9
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
10
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1926263
reference_id 1926263
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1926263
11
reference_url https://security.archlinux.org/ASA-202106-43
reference_id ASA-202106-43
reference_type
scores
url https://security.archlinux.org/ASA-202106-43
12
reference_url https://security.archlinux.org/AVG-1629
reference_id AVG-1629
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-1629
13
reference_url https://security.gentoo.org/glsa/202104-05
reference_id GLSA-202104-05
reference_type
scores
url https://security.gentoo.org/glsa/202104-05
14
reference_url https://access.redhat.com/errata/RHSA-2021:0696
reference_id RHSA-2021:0696
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:0696
15
reference_url https://access.redhat.com/errata/RHSA-2021:0697
reference_id RHSA-2021:0697
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:0697
16
reference_url https://access.redhat.com/errata/RHSA-2021:0698
reference_id RHSA-2021:0698
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:0698
17
reference_url https://access.redhat.com/errata/RHSA-2021:0699
reference_id RHSA-2021:0699
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:0699
18
reference_url https://access.redhat.com/errata/RHSA-2021:0700
reference_id RHSA-2021:0700
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:0700
19
reference_url https://access.redhat.com/errata/RHSA-2021:0701
reference_id RHSA-2021:0701
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:0701
20
reference_url https://access.redhat.com/errata/RHSA-2021:0702
reference_id RHSA-2021:0702
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:0702
21
reference_url https://access.redhat.com/errata/RHSA-2021:0703
reference_id RHSA-2021:0703
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:0703
22
reference_url https://access.redhat.com/errata/RHSA-2021:0704
reference_id RHSA-2021:0704
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:0704
23
reference_url https://access.redhat.com/errata/RHSA-2021:1734
reference_id RHSA-2021:1734
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:1734
24
reference_url https://access.redhat.com/errata/RHSA-2021:2566
reference_id RHSA-2021:2566
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:2566
25
reference_url https://access.redhat.com/errata/RHSA-2021:2790
reference_id RHSA-2021:2790
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:2790
26
reference_url https://access.redhat.com/errata/RHSA-2021:3675
reference_id RHSA-2021:3675
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:3675
27
reference_url https://usn.ubuntu.com/4992-1/
reference_id USN-4992-1
reference_type
scores
url https://usn.ubuntu.com/4992-1/
fixed_packages
0
url pkg:deb/debian/grub2@2.04-12
purl pkg:deb/debian/grub2@2.04-12
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2f6m-msj2-2fgy
1
vulnerability VCID-33ec-pjax-nkak
2
vulnerability VCID-6jes-p579-uyg3
3
vulnerability VCID-744c-pb2n-5kf4
4
vulnerability VCID-8axp-fasm-8ka4
5
vulnerability VCID-8kh4-ym2x-k3he
6
vulnerability VCID-8zje-6cet-h3a4
7
vulnerability VCID-9dkn-kkgd-37ce
8
vulnerability VCID-9mut-ye1e-pbdx
9
vulnerability VCID-f6ad-7qb1-9bcd
10
vulnerability VCID-g3tz-5rzv-wkgk
11
vulnerability VCID-gjbg-nve3-m3gy
12
vulnerability VCID-m4y5-twzm-dqcw
13
vulnerability VCID-m5vd-4m54-6ygc
14
vulnerability VCID-nn2e-jq31-n7bc
15
vulnerability VCID-uqg4-wh5j-6ud1
16
vulnerability VCID-v98w-vw6u-dyb3
17
vulnerability VCID-wp1a-2ueg-mych
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/grub2@2.04-12
1
url pkg:deb/debian/grub2@2.06-2
purl pkg:deb/debian/grub2@2.06-2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2f6m-msj2-2fgy
1
vulnerability VCID-33ec-pjax-nkak
2
vulnerability VCID-6jes-p579-uyg3
3
vulnerability VCID-8kh4-ym2x-k3he
4
vulnerability VCID-8zje-6cet-h3a4
5
vulnerability VCID-9dkn-kkgd-37ce
6
vulnerability VCID-9mut-ye1e-pbdx
7
vulnerability VCID-g3tz-5rzv-wkgk
8
vulnerability VCID-gjbg-nve3-m3gy
9
vulnerability VCID-nn2e-jq31-n7bc
10
vulnerability VCID-wp1a-2ueg-mych
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/grub2@2.06-2
aliases CVE-2021-20233
risk_score 3.4
exploitability 0.5
weighted_severity 6.8
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-f6ad-7qb1-9bcd
3
url VCID-m4y5-twzm-dqcw
vulnerability_id VCID-m4y5-twzm-dqcw
summary
Multiple vulnerabilities have been found in GRUB, the worst might
    allow for circumvention of UEFI Secure Boot.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-27749.json
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-27749.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2020-27749
reference_id
reference_type
scores
0
value 0.00046
scoring_system epss
scoring_elements 0.1402
published_at 2026-04-01T12:55:00Z
1
value 0.00046
scoring_system epss
scoring_elements 0.1393
published_at 2026-04-26T12:55:00Z
2
value 0.00046
scoring_system epss
scoring_elements 0.13851
published_at 2026-04-18T12:55:00Z
3
value 0.00046
scoring_system epss
scoring_elements 0.13922
published_at 2026-04-21T12:55:00Z
4
value 0.00046
scoring_system epss
scoring_elements 0.14102
published_at 2026-04-02T12:55:00Z
5
value 0.00046
scoring_system epss
scoring_elements 0.14157
published_at 2026-04-04T12:55:00Z
6
value 0.00046
scoring_system epss
scoring_elements 0.13966
published_at 2026-04-07T12:55:00Z
7
value 0.00046
scoring_system epss
scoring_elements 0.14049
published_at 2026-04-08T12:55:00Z
8
value 0.00046
scoring_system epss
scoring_elements 0.14101
published_at 2026-04-09T12:55:00Z
9
value 0.00046
scoring_system epss
scoring_elements 0.14046
published_at 2026-04-11T12:55:00Z
10
value 0.00046
scoring_system epss
scoring_elements 0.14008
published_at 2026-04-12T12:55:00Z
11
value 0.00046
scoring_system epss
scoring_elements 0.13957
published_at 2026-04-24T12:55:00Z
12
value 0.00046
scoring_system epss
scoring_elements 0.13857
published_at 2026-04-16T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2020-27749
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14372
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14372
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25632
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25632
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25647
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25647
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-27749
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-27749
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-27779
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-27779
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20225
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20225
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20233
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20233
9
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
10
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1899966
reference_id 1899966
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1899966
11
reference_url https://security.archlinux.org/ASA-202106-43
reference_id ASA-202106-43
reference_type
scores
url https://security.archlinux.org/ASA-202106-43
12
reference_url https://security.archlinux.org/AVG-1629
reference_id AVG-1629
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-1629
13
reference_url https://security.gentoo.org/glsa/202104-05
reference_id GLSA-202104-05
reference_type
scores
url https://security.gentoo.org/glsa/202104-05
14
reference_url https://access.redhat.com/errata/RHSA-2021:0696
reference_id RHSA-2021:0696
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:0696
15
reference_url https://access.redhat.com/errata/RHSA-2021:0697
reference_id RHSA-2021:0697
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:0697
16
reference_url https://access.redhat.com/errata/RHSA-2021:0698
reference_id RHSA-2021:0698
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:0698
17
reference_url https://access.redhat.com/errata/RHSA-2021:0699
reference_id RHSA-2021:0699
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:0699
18
reference_url https://access.redhat.com/errata/RHSA-2021:0700
reference_id RHSA-2021:0700
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:0700
19
reference_url https://access.redhat.com/errata/RHSA-2021:0701
reference_id RHSA-2021:0701
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:0701
20
reference_url https://access.redhat.com/errata/RHSA-2021:0702
reference_id RHSA-2021:0702
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:0702
21
reference_url https://access.redhat.com/errata/RHSA-2021:0703
reference_id RHSA-2021:0703
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:0703
22
reference_url https://access.redhat.com/errata/RHSA-2021:0704
reference_id RHSA-2021:0704
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:0704
23
reference_url https://access.redhat.com/errata/RHSA-2021:1734
reference_id RHSA-2021:1734
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:1734
24
reference_url https://access.redhat.com/errata/RHSA-2021:2566
reference_id RHSA-2021:2566
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:2566
25
reference_url https://access.redhat.com/errata/RHSA-2021:2790
reference_id RHSA-2021:2790
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:2790
26
reference_url https://access.redhat.com/errata/RHSA-2021:3675
reference_id RHSA-2021:3675
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:3675
27
reference_url https://usn.ubuntu.com/4992-1/
reference_id USN-4992-1
reference_type
scores
url https://usn.ubuntu.com/4992-1/
fixed_packages
0
url pkg:deb/debian/grub2@2.04-12
purl pkg:deb/debian/grub2@2.04-12
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2f6m-msj2-2fgy
1
vulnerability VCID-33ec-pjax-nkak
2
vulnerability VCID-6jes-p579-uyg3
3
vulnerability VCID-744c-pb2n-5kf4
4
vulnerability VCID-8axp-fasm-8ka4
5
vulnerability VCID-8kh4-ym2x-k3he
6
vulnerability VCID-8zje-6cet-h3a4
7
vulnerability VCID-9dkn-kkgd-37ce
8
vulnerability VCID-9mut-ye1e-pbdx
9
vulnerability VCID-f6ad-7qb1-9bcd
10
vulnerability VCID-g3tz-5rzv-wkgk
11
vulnerability VCID-gjbg-nve3-m3gy
12
vulnerability VCID-m4y5-twzm-dqcw
13
vulnerability VCID-m5vd-4m54-6ygc
14
vulnerability VCID-nn2e-jq31-n7bc
15
vulnerability VCID-uqg4-wh5j-6ud1
16
vulnerability VCID-v98w-vw6u-dyb3
17
vulnerability VCID-wp1a-2ueg-mych
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/grub2@2.04-12
1
url pkg:deb/debian/grub2@2.06-2
purl pkg:deb/debian/grub2@2.06-2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2f6m-msj2-2fgy
1
vulnerability VCID-33ec-pjax-nkak
2
vulnerability VCID-6jes-p579-uyg3
3
vulnerability VCID-8kh4-ym2x-k3he
4
vulnerability VCID-8zje-6cet-h3a4
5
vulnerability VCID-9dkn-kkgd-37ce
6
vulnerability VCID-9mut-ye1e-pbdx
7
vulnerability VCID-g3tz-5rzv-wkgk
8
vulnerability VCID-gjbg-nve3-m3gy
9
vulnerability VCID-nn2e-jq31-n7bc
10
vulnerability VCID-wp1a-2ueg-mych
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/grub2@2.06-2
aliases CVE-2020-27749
risk_score 3.4
exploitability 0.5
weighted_severity 6.8
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-m4y5-twzm-dqcw
4
url VCID-m5vd-4m54-6ygc
vulnerability_id VCID-m5vd-4m54-6ygc
summary
Multiple vulnerabilities have been found in GRUB, the worst might
    allow for circumvention of UEFI Secure Boot.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-25647.json
reference_id
reference_type
scores
0
value 7.6
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-25647.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2020-25647
reference_id
reference_type
scores
0
value 0.0001
scoring_system epss
scoring_elements 0.01175
published_at 2026-04-09T12:55:00Z
1
value 0.0001
scoring_system epss
scoring_elements 0.01158
published_at 2026-04-04T12:55:00Z
2
value 0.0001
scoring_system epss
scoring_elements 0.01168
published_at 2026-04-07T12:55:00Z
3
value 0.0001
scoring_system epss
scoring_elements 0.01174
published_at 2026-04-08T12:55:00Z
4
value 0.0001
scoring_system epss
scoring_elements 0.0116
published_at 2026-04-11T12:55:00Z
5
value 0.0001
scoring_system epss
scoring_elements 0.01153
published_at 2026-04-12T12:55:00Z
6
value 0.0001
scoring_system epss
scoring_elements 0.01157
published_at 2026-04-13T12:55:00Z
7
value 0.00012
scoring_system epss
scoring_elements 0.01449
published_at 2026-04-01T12:55:00Z
8
value 0.00012
scoring_system epss
scoring_elements 0.01461
published_at 2026-04-02T12:55:00Z
9
value 9e-05
scoring_system epss
scoring_elements 0.00916
published_at 2026-04-24T12:55:00Z
10
value 9e-05
scoring_system epss
scoring_elements 0.00865
published_at 2026-04-18T12:55:00Z
11
value 9e-05
scoring_system epss
scoring_elements 0.00913
published_at 2026-04-21T12:55:00Z
12
value 9e-05
scoring_system epss
scoring_elements 0.0092
published_at 2026-04-26T12:55:00Z
13
value 9e-05
scoring_system epss
scoring_elements 0.00858
published_at 2026-04-16T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2020-25647
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14372
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14372
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25632
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25632
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25647
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25647
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-27749
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-27749
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-27779
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-27779
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20225
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20225
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20233
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20233
9
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 7.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
10
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1886936
reference_id 1886936
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1886936
11
reference_url https://security.archlinux.org/ASA-202106-43
reference_id ASA-202106-43
reference_type
scores
url https://security.archlinux.org/ASA-202106-43
12
reference_url https://security.archlinux.org/AVG-1629
reference_id AVG-1629
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-1629
13
reference_url https://security.gentoo.org/glsa/202104-05
reference_id GLSA-202104-05
reference_type
scores
url https://security.gentoo.org/glsa/202104-05
14
reference_url https://access.redhat.com/errata/RHSA-2021:0696
reference_id RHSA-2021:0696
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:0696
15
reference_url https://access.redhat.com/errata/RHSA-2021:0697
reference_id RHSA-2021:0697
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:0697
16
reference_url https://access.redhat.com/errata/RHSA-2021:0698
reference_id RHSA-2021:0698
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:0698
17
reference_url https://access.redhat.com/errata/RHSA-2021:0699
reference_id RHSA-2021:0699
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:0699
18
reference_url https://access.redhat.com/errata/RHSA-2021:0700
reference_id RHSA-2021:0700
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:0700
19
reference_url https://access.redhat.com/errata/RHSA-2021:0701
reference_id RHSA-2021:0701
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:0701
20
reference_url https://access.redhat.com/errata/RHSA-2021:0702
reference_id RHSA-2021:0702
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:0702
21
reference_url https://access.redhat.com/errata/RHSA-2021:0703
reference_id RHSA-2021:0703
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:0703
22
reference_url https://access.redhat.com/errata/RHSA-2021:0704
reference_id RHSA-2021:0704
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:0704
23
reference_url https://access.redhat.com/errata/RHSA-2021:1734
reference_id RHSA-2021:1734
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:1734
24
reference_url https://access.redhat.com/errata/RHSA-2021:2566
reference_id RHSA-2021:2566
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:2566
25
reference_url https://access.redhat.com/errata/RHSA-2021:2790
reference_id RHSA-2021:2790
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:2790
26
reference_url https://access.redhat.com/errata/RHSA-2021:3675
reference_id RHSA-2021:3675
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:3675
fixed_packages
0
url pkg:deb/debian/grub2@2.04-12
purl pkg:deb/debian/grub2@2.04-12
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2f6m-msj2-2fgy
1
vulnerability VCID-33ec-pjax-nkak
2
vulnerability VCID-6jes-p579-uyg3
3
vulnerability VCID-744c-pb2n-5kf4
4
vulnerability VCID-8axp-fasm-8ka4
5
vulnerability VCID-8kh4-ym2x-k3he
6
vulnerability VCID-8zje-6cet-h3a4
7
vulnerability VCID-9dkn-kkgd-37ce
8
vulnerability VCID-9mut-ye1e-pbdx
9
vulnerability VCID-f6ad-7qb1-9bcd
10
vulnerability VCID-g3tz-5rzv-wkgk
11
vulnerability VCID-gjbg-nve3-m3gy
12
vulnerability VCID-m4y5-twzm-dqcw
13
vulnerability VCID-m5vd-4m54-6ygc
14
vulnerability VCID-nn2e-jq31-n7bc
15
vulnerability VCID-uqg4-wh5j-6ud1
16
vulnerability VCID-v98w-vw6u-dyb3
17
vulnerability VCID-wp1a-2ueg-mych
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/grub2@2.04-12
1
url pkg:deb/debian/grub2@2.06-2
purl pkg:deb/debian/grub2@2.06-2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2f6m-msj2-2fgy
1
vulnerability VCID-33ec-pjax-nkak
2
vulnerability VCID-6jes-p579-uyg3
3
vulnerability VCID-8kh4-ym2x-k3he
4
vulnerability VCID-8zje-6cet-h3a4
5
vulnerability VCID-9dkn-kkgd-37ce
6
vulnerability VCID-9mut-ye1e-pbdx
7
vulnerability VCID-g3tz-5rzv-wkgk
8
vulnerability VCID-gjbg-nve3-m3gy
9
vulnerability VCID-nn2e-jq31-n7bc
10
vulnerability VCID-wp1a-2ueg-mych
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/grub2@2.06-2
aliases CVE-2020-25647
risk_score 3.4
exploitability 0.5
weighted_severity 6.8
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-m5vd-4m54-6ygc
5
url VCID-uqg4-wh5j-6ud1
vulnerability_id VCID-uqg4-wh5j-6ud1
summary
Multiple vulnerabilities have been found in GRUB, the worst might
    allow for circumvention of UEFI Secure Boot.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14372.json
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14372.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2020-14372
reference_id
reference_type
scores
0
value 0.01884
scoring_system epss
scoring_elements 0.83229
published_at 2026-04-26T12:55:00Z
1
value 0.01884
scoring_system epss
scoring_elements 0.83195
published_at 2026-04-16T12:55:00Z
2
value 0.01884
scoring_system epss
scoring_elements 0.83196
published_at 2026-04-18T12:55:00Z
3
value 0.01884
scoring_system epss
scoring_elements 0.83199
published_at 2026-04-21T12:55:00Z
4
value 0.01884
scoring_system epss
scoring_elements 0.83221
published_at 2026-04-24T12:55:00Z
5
value 0.01884
scoring_system epss
scoring_elements 0.83123
published_at 2026-04-04T12:55:00Z
6
value 0.01884
scoring_system epss
scoring_elements 0.83121
published_at 2026-04-07T12:55:00Z
7
value 0.01884
scoring_system epss
scoring_elements 0.83145
published_at 2026-04-08T12:55:00Z
8
value 0.01884
scoring_system epss
scoring_elements 0.83153
published_at 2026-04-09T12:55:00Z
9
value 0.01884
scoring_system epss
scoring_elements 0.83168
published_at 2026-04-11T12:55:00Z
10
value 0.01884
scoring_system epss
scoring_elements 0.83162
published_at 2026-04-12T12:55:00Z
11
value 0.01884
scoring_system epss
scoring_elements 0.83158
published_at 2026-04-13T12:55:00Z
12
value 0.02096
scoring_system epss
scoring_elements 0.83992
published_at 2026-04-02T12:55:00Z
13
value 0.02096
scoring_system epss
scoring_elements 0.83978
published_at 2026-04-01T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2020-14372
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14372
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14372
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25632
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25632
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25647
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25647
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-27749
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-27749
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-27779
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-27779
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20225
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20225
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20233
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20233
9
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
10
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1873150
reference_id 1873150
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1873150
11
reference_url https://security.archlinux.org/ASA-202106-43
reference_id ASA-202106-43
reference_type
scores
url https://security.archlinux.org/ASA-202106-43
12
reference_url https://security.archlinux.org/AVG-1629
reference_id AVG-1629
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-1629
13
reference_url https://security.gentoo.org/glsa/202104-05
reference_id GLSA-202104-05
reference_type
scores
url https://security.gentoo.org/glsa/202104-05
14
reference_url https://access.redhat.com/errata/RHSA-2021:0696
reference_id RHSA-2021:0696
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:0696
15
reference_url https://access.redhat.com/errata/RHSA-2021:0697
reference_id RHSA-2021:0697
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:0697
16
reference_url https://access.redhat.com/errata/RHSA-2021:0698
reference_id RHSA-2021:0698
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:0698
17
reference_url https://access.redhat.com/errata/RHSA-2021:0699
reference_id RHSA-2021:0699
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:0699
18
reference_url https://access.redhat.com/errata/RHSA-2021:0700
reference_id RHSA-2021:0700
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:0700
19
reference_url https://access.redhat.com/errata/RHSA-2021:0701
reference_id RHSA-2021:0701
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:0701
20
reference_url https://access.redhat.com/errata/RHSA-2021:0702
reference_id RHSA-2021:0702
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:0702
21
reference_url https://access.redhat.com/errata/RHSA-2021:0703
reference_id RHSA-2021:0703
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:0703
22
reference_url https://access.redhat.com/errata/RHSA-2021:0704
reference_id RHSA-2021:0704
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:0704
23
reference_url https://access.redhat.com/errata/RHSA-2021:1734
reference_id RHSA-2021:1734
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:1734
24
reference_url https://access.redhat.com/errata/RHSA-2021:2566
reference_id RHSA-2021:2566
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:2566
25
reference_url https://access.redhat.com/errata/RHSA-2021:2790
reference_id RHSA-2021:2790
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:2790
26
reference_url https://access.redhat.com/errata/RHSA-2021:3675
reference_id RHSA-2021:3675
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:3675
27
reference_url https://usn.ubuntu.com/4992-1/
reference_id USN-4992-1
reference_type
scores
url https://usn.ubuntu.com/4992-1/
fixed_packages
0
url pkg:deb/debian/grub2@2.04-12
purl pkg:deb/debian/grub2@2.04-12
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2f6m-msj2-2fgy
1
vulnerability VCID-33ec-pjax-nkak
2
vulnerability VCID-6jes-p579-uyg3
3
vulnerability VCID-744c-pb2n-5kf4
4
vulnerability VCID-8axp-fasm-8ka4
5
vulnerability VCID-8kh4-ym2x-k3he
6
vulnerability VCID-8zje-6cet-h3a4
7
vulnerability VCID-9dkn-kkgd-37ce
8
vulnerability VCID-9mut-ye1e-pbdx
9
vulnerability VCID-f6ad-7qb1-9bcd
10
vulnerability VCID-g3tz-5rzv-wkgk
11
vulnerability VCID-gjbg-nve3-m3gy
12
vulnerability VCID-m4y5-twzm-dqcw
13
vulnerability VCID-m5vd-4m54-6ygc
14
vulnerability VCID-nn2e-jq31-n7bc
15
vulnerability VCID-uqg4-wh5j-6ud1
16
vulnerability VCID-v98w-vw6u-dyb3
17
vulnerability VCID-wp1a-2ueg-mych
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/grub2@2.04-12
1
url pkg:deb/debian/grub2@2.06-2
purl pkg:deb/debian/grub2@2.06-2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2f6m-msj2-2fgy
1
vulnerability VCID-33ec-pjax-nkak
2
vulnerability VCID-6jes-p579-uyg3
3
vulnerability VCID-8kh4-ym2x-k3he
4
vulnerability VCID-8zje-6cet-h3a4
5
vulnerability VCID-9dkn-kkgd-37ce
6
vulnerability VCID-9mut-ye1e-pbdx
7
vulnerability VCID-g3tz-5rzv-wkgk
8
vulnerability VCID-gjbg-nve3-m3gy
9
vulnerability VCID-nn2e-jq31-n7bc
10
vulnerability VCID-wp1a-2ueg-mych
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/grub2@2.06-2
aliases CVE-2020-14372
risk_score 3.4
exploitability 0.5
weighted_severity 6.8
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-uqg4-wh5j-6ud1
6
url VCID-v98w-vw6u-dyb3
vulnerability_id VCID-v98w-vw6u-dyb3
summary
Multiple vulnerabilities have been found in GRUB, the worst might
    allow for circumvention of UEFI Secure Boot.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-25632.json
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-25632.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2020-25632
reference_id
reference_type
scores
0
value 0.0002
scoring_system epss
scoring_elements 0.05393
published_at 2026-04-26T12:55:00Z
1
value 0.0002
scoring_system epss
scoring_elements 0.05157
published_at 2026-04-16T12:55:00Z
2
value 0.0002
scoring_system epss
scoring_elements 0.0516
published_at 2026-04-18T12:55:00Z
3
value 0.0002
scoring_system epss
scoring_elements 0.05313
published_at 2026-04-21T12:55:00Z
4
value 0.0002
scoring_system epss
scoring_elements 0.05351
published_at 2026-04-24T12:55:00Z
5
value 0.00023
scoring_system epss
scoring_elements 0.06078
published_at 2026-04-04T12:55:00Z
6
value 0.00023
scoring_system epss
scoring_elements 0.061
published_at 2026-04-08T12:55:00Z
7
value 0.00023
scoring_system epss
scoring_elements 0.06141
published_at 2026-04-09T12:55:00Z
8
value 0.00023
scoring_system epss
scoring_elements 0.06131
published_at 2026-04-11T12:55:00Z
9
value 0.00023
scoring_system epss
scoring_elements 0.06127
published_at 2026-04-12T12:55:00Z
10
value 0.00023
scoring_system epss
scoring_elements 0.0612
published_at 2026-04-13T12:55:00Z
11
value 0.00023
scoring_system epss
scoring_elements 0.0606
published_at 2026-04-07T12:55:00Z
12
value 0.00025
scoring_system epss
scoring_elements 0.06945
published_at 2026-04-02T12:55:00Z
13
value 0.00025
scoring_system epss
scoring_elements 0.06841
published_at 2026-04-01T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2020-25632
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14372
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14372
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25632
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25632
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25647
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25647
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-27749
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-27749
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-27779
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-27779
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20225
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20225
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20233
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20233
9
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
10
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1879577
reference_id 1879577
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1879577
11
reference_url https://security.archlinux.org/ASA-202106-43
reference_id ASA-202106-43
reference_type
scores
url https://security.archlinux.org/ASA-202106-43
12
reference_url https://security.archlinux.org/AVG-1629
reference_id AVG-1629
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-1629
13
reference_url https://security.gentoo.org/glsa/202104-05
reference_id GLSA-202104-05
reference_type
scores
url https://security.gentoo.org/glsa/202104-05
14
reference_url https://access.redhat.com/errata/RHSA-2021:0696
reference_id RHSA-2021:0696
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:0696
15
reference_url https://access.redhat.com/errata/RHSA-2021:0697
reference_id RHSA-2021:0697
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:0697
16
reference_url https://access.redhat.com/errata/RHSA-2021:0698
reference_id RHSA-2021:0698
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:0698
17
reference_url https://access.redhat.com/errata/RHSA-2021:0699
reference_id RHSA-2021:0699
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:0699
18
reference_url https://access.redhat.com/errata/RHSA-2021:0700
reference_id RHSA-2021:0700
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:0700
19
reference_url https://access.redhat.com/errata/RHSA-2021:0701
reference_id RHSA-2021:0701
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:0701
20
reference_url https://access.redhat.com/errata/RHSA-2021:0702
reference_id RHSA-2021:0702
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:0702
21
reference_url https://access.redhat.com/errata/RHSA-2021:0703
reference_id RHSA-2021:0703
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:0703
22
reference_url https://access.redhat.com/errata/RHSA-2021:0704
reference_id RHSA-2021:0704
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:0704
23
reference_url https://access.redhat.com/errata/RHSA-2021:1734
reference_id RHSA-2021:1734
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:1734
24
reference_url https://access.redhat.com/errata/RHSA-2021:2566
reference_id RHSA-2021:2566
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:2566
25
reference_url https://access.redhat.com/errata/RHSA-2021:2790
reference_id RHSA-2021:2790
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:2790
26
reference_url https://access.redhat.com/errata/RHSA-2021:3675
reference_id RHSA-2021:3675
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:3675
27
reference_url https://usn.ubuntu.com/4992-1/
reference_id USN-4992-1
reference_type
scores
url https://usn.ubuntu.com/4992-1/
fixed_packages
0
url pkg:deb/debian/grub2@2.04-12
purl pkg:deb/debian/grub2@2.04-12
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2f6m-msj2-2fgy
1
vulnerability VCID-33ec-pjax-nkak
2
vulnerability VCID-6jes-p579-uyg3
3
vulnerability VCID-744c-pb2n-5kf4
4
vulnerability VCID-8axp-fasm-8ka4
5
vulnerability VCID-8kh4-ym2x-k3he
6
vulnerability VCID-8zje-6cet-h3a4
7
vulnerability VCID-9dkn-kkgd-37ce
8
vulnerability VCID-9mut-ye1e-pbdx
9
vulnerability VCID-f6ad-7qb1-9bcd
10
vulnerability VCID-g3tz-5rzv-wkgk
11
vulnerability VCID-gjbg-nve3-m3gy
12
vulnerability VCID-m4y5-twzm-dqcw
13
vulnerability VCID-m5vd-4m54-6ygc
14
vulnerability VCID-nn2e-jq31-n7bc
15
vulnerability VCID-uqg4-wh5j-6ud1
16
vulnerability VCID-v98w-vw6u-dyb3
17
vulnerability VCID-wp1a-2ueg-mych
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/grub2@2.04-12
1
url pkg:deb/debian/grub2@2.06-2
purl pkg:deb/debian/grub2@2.06-2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2f6m-msj2-2fgy
1
vulnerability VCID-33ec-pjax-nkak
2
vulnerability VCID-6jes-p579-uyg3
3
vulnerability VCID-8kh4-ym2x-k3he
4
vulnerability VCID-8zje-6cet-h3a4
5
vulnerability VCID-9dkn-kkgd-37ce
6
vulnerability VCID-9mut-ye1e-pbdx
7
vulnerability VCID-g3tz-5rzv-wkgk
8
vulnerability VCID-gjbg-nve3-m3gy
9
vulnerability VCID-nn2e-jq31-n7bc
10
vulnerability VCID-wp1a-2ueg-mych
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/grub2@2.06-2
aliases CVE-2020-25632
risk_score 3.4
exploitability 0.5
weighted_severity 6.8
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-v98w-vw6u-dyb3
Risk_score4.0
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:deb/debian/grub2@2.06-2