GRUB2
cpe:2.3:a:gnu:grub:*:*:*:*:*:*:*, +1 more
A use-after-free vulnerability has been identified in the GRUB2 bootloader's normal module. This issue arises because the normal_exit command is not properly unregistered when the module is unloaded. An attacker can exploit this vulnerability by invoking the command after the module has been removed, leading to a system crash or potential unauthorized access to previously freed memory. Such exploitation could disrupt system stability or allow for unauthorized code execution.
Exploitation of this vulnerability can cause a system crash or unauthorized access to memory, potentially leading to exploitation of other vulnerabilities or execution of arbitrary code.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.