CVE-2020-27779

A flaw was found in grub2 in versions prior to 2.06. The cutmem command does not honor secure boot locking allowing an privileged attacker to remove address ranges from memory creating an opportunity to circumvent SecureBoot protections after proper triage about grub's memory layout. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

• CWE-285

• https://bugzilla.redhat.com/show_bug.cgi?id=1900698Issue Tracking, Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZWZ36QK4IKU6MWDWNOOWKPH3WXZBHT2R/
• https://security.gentoo.org/glsa/202104-05Third Party Advisory
• https://security.netapp.com/advisory/ntap-20220325-0001/Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=1900698Issue Tracking, Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZWZ36QK4IKU6MWDWNOOWKPH3WXZBHT2R/
• https://security.gentoo.org/glsa/202104-05Third Party Advisory
• https://security.netapp.com/advisory/ntap-20220325-0001/Third Party Advisory

Published

Mar 3, 2021

Last Modified

Jun 17, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-27773A flaw was found in ImageMagick in MagickCore/gem-private.h.…3.3
• CVE-2020-27774A flaw was found in ImageMagick in MagickCore/statistic.c. A…3.3
• CVE-2020-27775A flaw was found in ImageMagick in MagickCore/quantum.h. An …3.3
• CVE-2020-27776A flaw was found in ImageMagick in MagickCore/statistic.c. A…3.3
• CVE-2020-27777A flaw was found in the way RTAS handled memory accesses in …6.7
• CVE-2020-27778A flaw was found in Poppler in the way certain PDF files wer…7.5
• CVE-2020-2778Vulnerability in the Java SE product of Oracle Java SE (comp…3.7
• CVE-2020-27780A flaw was found in Linux-Pam in versions prior to 1.5.1 in …9.8
• CVE-2020-27781User credentials can be manipulated and stolen by Native Cep…7.1
• CVE-2020-27782A flaw was found in the Undertow AJP connector. Malicious re…7.5
• CVE-2020-27783A XSS vulnerability was discovered in python-lxml's clean mo…6.1
• CVE-2020-27784A vulnerability was found in the Linux kernel, where accessi…5.5