0

Are there any real examples (malware, rootkits, etc.) of exploiting the UEFI secure boot mechanism vulnerabilities such as CVE-2022-21894?

Improve this question
1
  • CVE-2022-21894 is not a secure boot vulnerability. It is a Windows bootloader vulnerability that allows bypassing security boot.
    – Margaret Bloom
    Mar 2 at 15:22

1 Answer 1

Reset to default
1

Just recently BlackLotus UEFI bootkit has been discovered which not only exploits this vulnerability, it does a ton more to gain persistence (complete system reinstallation will not help - you'll have to reset MOK keys and probably even reflash BIOS) it disables multiple Windows 11 protections to remain completely undetected.

Improve this answer

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .