CVE-2023-4692 — Security Box Score

CVE · referencelatest edition

Reference page — cumulative record through Wednesday, August 19, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.

CVE-2023-4692HIGH

Grub2: out-of-bounds write at fs/ntfs.c may lead to unsigned code execution

  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   L   L   L   N  U  H  H  H    7.8   .0054   42.9     —

AFFECTED
  Product                     Versions     Fixed
  grub                        unspecified  2.12
  Red Hat Enterprise Linux 8  unspecified  1:2.02-156.el8
  Red Hat Enterprise Linux 9  unspecified  1:2.06-77.el9
  Red Hat Enterprise Linux 7  unspecified  —

TIMELINE
  Aug 31  Reserved by redhat
  Oct 25  Published (CNA: redhat)
  Jul 21  EXPLOIT PUBLISHED — CVE-2023-4692 (grub). Public exploit reference added.
  Jul 21  RESCORED — CVE-2023-4692 (grub). CVSS 7.5 → 7.8 (NVD).

CWE-787, CWE-122 · CNA: redhat · CVSS v3.1 · 13 references · NVD status: Modified

Description

An out-of-bounds write flaw was found in grub2's NTFS filesystem driver. This issue may allow an attacker to present a specially crafted NTFS filesystem image, leading to grub's heap metadata corruption. In some circumstances, the attack may also corrupt the UEFI firmware heap metadata. As a result, arbitrary code execution and secure boot protection bypass may be achieved.

Lifecycle

Complete event history — 4 events, chronological
Date	Event	Detail
August 31, 2023	Reserved	Reserved by redhat
October 25, 2023	Published	Published (CNA: redhat)
July 21, 2026	EXPLOIT PUBLISHED	EXPLOIT PUBLISHED — CVE-2023-4692 (grub). Public exploit reference added.
July 21, 2026	RESCORED	RESCORED — CVE-2023-4692 (grub). CVSS 7.5 → 7.8 (NVD).

Affected

Affected products and packages — 4 rows
Vendor	Product / Package	Ecosystem	Version introduced	Fixed
—	grub	—	—	2.12
Red Hat	Red Hat Enterprise Linux 8	—	—	1:2.02-156.el8
Red Hat	Red Hat Enterprise Linux 9	—	—	1:2.06-77.el9
Red Hat	Red Hat Enterprise Linux 7	—	—	—

Weaknesses

CWE-787 · CWE-122

References (13)

https://access.redhat.com/errata/RHSA-2024:2456
https://access.redhat.com/errata/RHSA-2024:3184
https://access.redhat.com/security/cve/CVE-2023-4692 [Third Party Advisory]
https://bugzilla.redhat.com/show_bug.cgi?id=2236613 [Issue Tracking, Third Party Advisory]
https://dfir.ru/2023/10/03/cve-2023-4692-cve-2023-4693-vulnerabilities-in-the-grub-boot-manager/ [Exploit, Third Party Advisory]
https://lists.debian.org/debian-lts-announce/2023/10/msg00007.html
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FUU42E7CPYLATXOYVYNW6YTXXULAOV6L/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OIRJ5UZRXX2KLR4IKBJEQUNGOCXMMDLY/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PERFILCHFEUGG3OAMC6W55P6DDIBZK4Q/
https://lists.gnu.org/archive/html/grub-devel/2023-10/msg00028.html [Mailing List]
https://seclists.org/oss-sec/2023/q4/37 [Mailing List, Third Party Advisory]
https://security.gentoo.org/glsa/202311-14
https://security.netapp.com/advisory/ntap-20231208-0002/

Authoritative record: CVE-2023-4692 at cve.org

Vendors: red hat

Weaknesses: CWE-787 · CWE-122

About this page

This is a reference page, not a dated page of record. It assembles the complete lifecycle of CVE-2023-4692 from the CVE Program record, NVD enrichment, the CISA KEV catalog, EPSS, and OSV advisories. The box score's numbers (CVSS, EPSS, KEV status) are current as of Wednesday, August 19, 2026 UTC and are re-derived as the archive grows; only dated daily editions are immutable pages of record. The authoritative source for this identifier is cve.org.