Dashboard / CVE-2025-1118

CVE-2025-1118

MEDIUM
MEDIUM Priority: 0.01 BB Relevance: 29/100
Published: 2025-02-19 Modified: 2026-11-05 First seen: 2026-11-05 Status: active

Attack Surface

Low Complexity No Interaction Conf. Impact

CVSS Vector Breakdown

AV: Local
AC: Low
PR: High
UI: None
S: Unchanged
C: High
I: None
A: None

Description

A flaw was found in grub2. Grub's dump command is not blocked when grub is in lockdown mode, which allows the user to read any memory information, and an attacker may leverage this in order to extract signatures, salts, and other sensitive information from the memory.

Weakness Classification (1)

Affected Software (1)

VendorProductVersion
— — 0

References & Advisories (5)

https://access.redhat.com/errata/RHSA-2025:16154
vendor-advisory x_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=2346137
issue-tracking x_refsource_REDHAT

Bug Bounty Relevance

29 / 100
✓ Low complexity
✓ No user interaction

CVSS Score

4.4 / 10.0 v3.1
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

EPSS — Exploitation Probability

0.32%
Raw Score 0.003210
Percentile 25.5%
Date 2026-11-14

EPSS Trend

2026-11-14
0.00321
2026-11-13
0.00321
2026-11-12
0.00321
2026-11-10
0.00321
2026-11-09
0.00321
2026-11-08
0.00321
2026-11-07
0.00321
2026-11-06
0.00321
2026-11-05
0.00321

Intelligence Sources

mitre ref →
nvd ref →

External Links