Are there any real examples (malware, rootkits, etc.) of exploiting the UEFI secure boot mechanism vulnerabilities such as CVE-2022-21894?

  • CVE-2022-21894 is not a secure boot vulnerability. It is a Windows bootloader vulnerability that allows bypassing security boot. Commented Mar 2, 2023 at 15:22

1 Answer 1


Just recently BlackLotus UEFI bootkit has been discovered which not only exploits this vulnerability, it does a ton more to gain persistence (complete system reinstallation will not help - you'll have to reset MOK keys and probably even reflash BIOS) it disables multiple Windows 11 protections to remain completely undetected.

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .