GNU Project GNU GRUB

• CVE-2022-28736 Medium 6.4 There's a use-after-free vulnerability in grub_cmd_chainloader() function 0.3%
• CVE-2022-28735 Medium 6.7 The GRUB2's shim_lock verifier allows non-kernel files to be loaded on shim-powered secure boot systems. Allowing such files to be loaded may lead to unverified code and modules to be loaded in GRUB2 0.3%
• CVE-2022-28734 High 8.1 Out-of-bounds write when handling split HTTP headers 1.1%
• CVE-2022-28733 High 8.1 Integer underflow in grub_net_recv_ip4_packets 1.3%