Guidance related to Secure Boot Manager changes associated with CVE-2023-24932

  • Thread starter Thread starter MSRC
  • Start date Start date
M

MSRC

Summary Today, Microsoft is releasing CVE-2023-24932, and associated configuration guidance, to address a Secure Boot bypass vulnerability used by the BlackLotus bootkit to exploit CVE-2022-21894. Customers will need to closely follow the configuration guidance to fully protect against this vulnerability. This vulnerability allows an attacker to execute self-signed code at the Unified Extensible Firmware Interface (UEFI) level while Secure Boot is enabled.

Continue reading...
 
Back
Top