Suppose you have a computer with a UEFI motherboard and several OSes in a multi-boot setting. One of these OSes is vulnerable, while others are secure. The vulnerable OS becomes compromised.

Does this mean also that potentially the adversary can also detect the UEFI support, compromise the BIOS, then use that to compromise the secure OSes? Is there a way to isolate the vulnerable OS from BIOS?

  • You would need to use BootGuard or a TPM for measured boot if you want to prevent a compromised BIOS/UEFI from messing with the running operating system. If one of the operating systems is infected with privileged malware, it can absolutely modify firmware. I'm pretty sure this is a duplicate of another question, but I can't find it right now... – forest Dec 14 '18 at 9:08

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.