Glossary: Modern Vulnerabilities, Malware and Physical Attacks

CVE (Common Vulnerabilities and Exposures)

Also written: CVE-2024-3094, CVE-2022-21894

A public catalog that gives each known flaw an ID number. For example, CVE-2024-3094 is the xz utils backdoor and CVE-2022-21894 is the Secure Boot flaw BlackLotus used.

Where the book teaches it

Chapter 2: Identity providers, mobile devices, misconfiguration and public storage
Chapter 4: Malware, part 2: viruses, rootkits, keyloggers, logic bombs and fileless malware

Related terms

xz utils BlackLotus