From what I understand on trusted boot, it is part of the SRTM (Static Root of Trust Management) system, a check/verification that is done at load time.
Specifically, trusted boot measures and verifies launch of an OS kernel or VMM.
My question is: if a computer already has trusted boot enabled (with no issues), and there is a memory unsafe bug on a server running on the computer, would an attacker be able to exploit the memory unsafe bug (e.g. inject malicious code)?
My take is that trusted boot only verifies the state of the OS kernel at launch time, but it would not defend against the memory unsafe bug(s) because the exploitation of these bugs take place after the computer is booted.