shim vulnerabilities
CVEs whose affected-version data names the shim package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2023-40548High· 7.4A buffer overflow was found in Shim in the 32-bit system
A buffer overflow was found in Shim in the 32-bit system. The overflow happens due to an addition operation involving a user-controlled value parsed from the PE binary being used by Shim. This value is further used for memory allocation …
▾ Twilightredhat · shimEPSS 0.44%via NVD
CVE-2023-40547High· 8.3A remote code execution vulnerability was found in Shim
A remote code execution vulnerability was found in Shim. The Shim boot support trusts attacker-controlled values when parsing an HTTP response. This flaw allows an attacker to craft a specific malicious HTTP request, leading to a complet…
▾ Twilightredhat · shimEPSS 5.4%via NVD