CVE Tools
Track your stack

Bootstrap OS

63 CVEs tracked. 3 of them are in CISA KEV.

This hub aggregates every CVE we track for Bootstrap OS, a product in the hardware firmware space. Use it to gauge the current risk picture and drill into individual advisories.

Bootstrap OS CVEs per month

Dec 2024 to Nov 2026. Point at a month, or focus the strip and use the arrow keys.
Bootstrap OS CVEs per month
MonthCVEs
2024-124
2025-013
2025-024
2025-032
2025-041
2025-050
2025-060
2025-070
2025-080
2025-090
2025-100
2025-110
2025-120
2026-010
2026-020
2026-030
2026-040
2026-050
2026-060
2026-070
2026-080
2026-090
2026-100
2026-110

Severity

How the 63 CVEs score on CVSS. Severity is not exploitation: KEV is counted above.

  • Critical610%
  • High1930%
  • Medium2946%
  • Low914%

Latest CVEs

The 15 most recently published vulnerabilities affecting Bootstrap OS.

  1. CVE-2025-30691Vulnerability in Oracle Java SE (component: Compiler). Supported versions that are affected are Oracle Java SE: 21.0.6, 24; Oracle GraalVM for JDK: 21.0.6 and 24. Difficult to exploit vulnerabili...4.8
  2. CVE-2025-29768Vim vulnerable to potential data loss with zip.vim and special crafted zip files4.4
  3. CVE-2025-24813Apache Tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT9.8
  4. CVE-2025-1215vim main.c memory corruption2.8
  5. CVE-2024-12797RFC7250 handshakes with unauthenticated servers don't abort as expected7.4
  6. CVE-2025-0665eventfd double close7.0
  7. CVE-2025-0167netrc and default credential leak3.4
  8. CVE-2025-21502Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Oracle Java ...4.8
  9. CVE-2024-13176Timing side-channel in ECDSA signature computation4.6
  10. CVE-2025-22134heap-buffer-overflow with visual mode in Vim < 9.1.10034.2
  11. CVE-2024-56337Apache Tomcat: RCE due to TOCTOU issue in JSP compilation - CVE-2024-50379 mitigation was incomplete9.8
  12. CVE-2024-54677Apache Tomcat: DoS in examples web application5.3
  13. CVE-2024-50379Apache Tomcat: RCE due to TOCTOU issue in JSP compilation9.8
  14. CVE-2024-11053netrc and redirect credential leak3.4
  15. CVE-2024-4741Use After Free with SSL_free_buffers9.8

Product grouping is registry-driven, with AI assist and human review. How it works