Phoenix Technologies Ltd. SCT3 vulnerabilities

2 vulnerabilities

Known vulnerabilities in Phoenix Technologies Ltd. SCT3, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

7.2CVE-2014-4859american megatrends incorporated (ami)bios+3
EPSS score
0.59%
Integer overflow in the Drive Execution Environment (DXE) phase in the Capsule Update feature in the UEFI implementation in EDK2 allows physically proximate attackers to bypass intended access restrictions via crafted data.7.2CVE-2014-4860american megatrends incorporated (ami)bios+3
EPSS score
0.50%
Multiple integer overflows in the Pre-EFI Initialization (PEI) boot phase in the Capsule Update feature in the UEFI implementation in EDK2 allow physically proximate attackers to bypass intended access restrictions by providing crafted data that is not properly handled during the coalescing phase.