GNU GRUB2

• CVE-2026-97876 Medium 6.4 Bypass of GRUB lockdown restriction in Secure Boot mode via serial command MMIO base address 0.1%
• CVE-2025-54770 Medium 4.9 Grub2: use-after-free in net_set_vlan 0.2%
• CVE-2025-61664 Medium 4.9 Grub2: missing unregister call for normal_exit command may lead to use-after-free 0.1%
• CVE-2025-61663 Medium 4.9 Grub2: missing unregister call for normal commands may lead to use-after-free 0.1%
• CVE-2025-61662 High 7.8 Grub2: missing unregister call for gettext command may lead to use-after-free 0.2%
• CVE-2025-61661 Medium 4.8 Grub2: grub2: out-of-bounds write via malicious usb device 0.2%
• CVE-2025-54771 Medium 4.9 Grub2: use-after-free in grub_file_close() 0.2%
• CVE-2024-56738 Medium 5.3 GNU GRUB (aka GRUB2) through 2.12 does not use a constant-time algorithm for grub_crypto_memcmp and thus allows side-channel attacks. 0.4%
• CVE-2024-56737 High 8.8 GNU GRUB (aka GRUB2) through 2.12 has a heap-based buffer overflow in fs/hfs.c via crafted sblock data in an HFS filesystem. 0.7%