CVE-2020-15706

CVE-2020-15706 is a use-after-free vulnerability in GRUB2 (versions 2.04 and prior) affecting various Linux distributions and Microsoft. It stems from a race condition in grub_script_function_create() that allows arbitrary code execution and secure boot bypass by redefining an executing function. With a CVSS score of 6.4 (MEDIUM), exploitation requires high privileges and high attack complexity, but can lead to full compromise of confidentiality, integrity, and availability. There is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.