Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-4hqv-6cp5-4rq9

Опубликовано: 09 июн. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 7.8

Описание

Multiple Microsoft-sigend UEFI SHIM bootloaders are vulnerable to SecureBoot bypass. An attacker with administrative privileges or the ability to modify the boot process could use one of the vulnerable shim bootloaders to bypass Secure Boot protections and execute arbitrary code before the operating system loads. Specific UEFI DBX update is required to block these vulnerable boot loaders.

Multiple Microsoft-sigend UEFI SHIM bootloaders are vulnerable to SecureBoot bypass. An attacker with administrative privileges or the ability to modify the boot process could use one of the vulnerable shim bootloaders to bypass Secure Boot protections and execute arbitrary code before the operating system loads. Specific UEFI DBX update is required to block these vulnerable boot loaders.

EPSS

Процентиль: 1%
0.0011
Низкий

7.8 High

CVSS3

Связанные уязвимости

CVSS3: 7.8
nvd
около 2 месяцев назад

Multiple Microsoft-sigend UEFI SHIM bootloaders are vulnerable to SecureBoot bypass. An attacker with administrative privileges or the ability to modify the boot process could use one of the vulnerable shim bootloaders to bypass Secure Boot protections and execute arbitrary code before the operating system loads. Specific UEFI DBX update is required to block these vulnerable boot loaders.

CVSS3: 7.8
msrc
около 2 месяцев назад

UEFI Secure Boot Security Feature Bypass Vulnerability

CVSS3: 7.8
debian
около 2 месяцев назад

Multiple Microsoft-sigend UEFI SHIM bootloaders are vulnerable to Secu ...

CVSS3: 7.8
fstec
около 2 месяцев назад

Уязвимость защитного механизма UEFI Secure Boot операционных систем Windows, позволяющая нарушителю обойти ограничения безопасности и выполнить произвольный код

EPSS

Процентиль: 1%
0.0011
Низкий

7.8 High

CVSS3