grub2 is vulnerable to arbitrary code execution. The vulnerability exists through a crafted grub.cfg file during boot process.
lists.opensuse.org/opensuse-security-announce/2020-08/msg00016.html
lists.opensuse.org/opensuse-security-announce/2020-08/msg00017.html
www.openwall.com/lists/oss-security/2020/07/29/3
access.redhat.com/errata/RHSA-2020:3223
access.redhat.com/security/updates/classification/#moderate
access.redhat.com/security/vulnerabilities/grub2bootloader
bugzilla.redhat.com/show_bug.cgi?id=1825243
cve.openeuler.org/#/CVEInfo/CVE-2020-10713
eclypsium.com/2020/07/29/theres-a-hole-in-the-boot/
kb.vmware.com/s/article/80181
security.gentoo.org/glsa/202104-05
security.netapp.com/advisory/ntap-20200731-0008/
tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-grub2-code-exec-xLePCAPY
usn.ubuntu.com/4432-1/
www.debian.org/security/2020/dsa-4735
www.kb.cert.org/vuls/id/174059