Tag
high
threat
barebox EFI PE Loader Memory-Safety Vulnerabilities (CVE-2026-34963)
1 rule 1 TTP 1 CVEbarebox versions prior to 2026.04.0 are vulnerable to memory-safety issues in the EFI PE loader (CVE-2026-34963), potentially allowing code execution via malicious EFI PE binaries.
barebox
memory-safety
heap-overflow
bootloader
1r
1t
1c
high
advisory
Multiple Vulnerabilities in Grub Bootloader
2 rules 2 TTPsMultiple vulnerabilities in the Grub bootloader allow attackers to execute arbitrary code and cause denial-of-service conditions.
bootloader
grub2
vulnerability
denial-of-service
arbitrary-code-execution
2r
2t
high
advisory
Windows EFI Bootloader File Modification Detection
2 rules 1 TTP 1 CVEA process writing to critical EFI bootloader files (bootmgfw.efi or bootx64.efi) within the \EFI\Boot\ directory may indicate a bootkit installation, malicious code persistence at the firmware level, or tampering with the system boot process.
Splunk Enterprise +2
bootkit
persistence
efi
bootloader
windows
2r
1t
1c