Summary
Impact: Security Feature Bypass. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.
Details
What kind of security feature could be bypassed by successfully exploiting this vulnerability?
An attacker who successfully exploited this vulnerability could bypass Secure Boot to run unauthorized code. To be successful the attacker would need either physical access or administrator privileges.
Security updates
10.0.17763.4252 — https://support.microsoft.com/help/5025229
10.0.20348.1668 — https://support.microsoft.com/help/5025230
10.0.19042.2846 — https://support.microsoft.com/help/5025221
10.0.22000.1817 — https://support.microsoft.com/help/5025224
10.0.22621.1555 — https://support.microsoft.com/help/5025239
10.0.10240.19869 — https://support.microsoft.com/help/5025234
10.0.14393.5850 — https://support.microsoft.com/help/5025228
6.2.9200.24216 — https://support.microsoft.com/help/5025287
6.2.9200.24216 — https://support.microsoft.com/help/5025272
6.3.9600.20919 — https://support.microsoft.com/help/5025285
6.3.9600.20919 — https://support.microsoft.com/help/5025288
Vulnerabilities 1
-
Medium 6.2
Windows Boot Manager Security Feature Bypass Vulnerability
Windows Boot Manager Security Feature Bypass Vulnerability
Revision history
-
#1
Information published.
References
-
CVE-2023-28249 Windows Boot Manager Security Feature Bypass Vulnerability - HTML
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28249
-
Microsoft Exploitability Index
https://www.microsoft.com/en-us/msrc/exploitability-index?rtc=1
-
Microsoft Support Lifecycle
https://support.microsoft.com/lifecycle
-
Common Vulnerability Scoring System
https://www.first.org/cvss