Skip to content
OpenAdvisories
High MSRC-CVE-2024-28922 1 CVE

Secure Boot Security Feature Bypass Vulnerability

Published Apr 9, 2024 · Updated Apr 9, 2024

Summary

Impact: Security Feature Bypass. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

Details

What kind of security feature could be bypassed by successfully exploiting this vulnerability?
An attacker who successfully exploited this vulnerability could bypass Secure Boot.

Are there additional steps I need to take to be protected from this vulnerability?
All customers should apply the April 9, 2024 Windows security updates. These security updates address this vulnerability by updating the Windows Boot Manager and other components, but the protections are not enabled by default. Additional steps are required at this time to mitigate this vulnerability. Please refer to KB5025885: How to manage the Windows Boot Manager revocations for Secure Boot changes associated with CVE-2023-24932. This article describes the protection against this Secure Boot security feature bypass, how to enable the protections, and guidance to update bootable media.

Security updates
10.0.17763.5696 — https://support.microsoft.com/help/5036896
10.0.20348.2402 — https://support.microsoft.com/help/5036909
10.0.22000.2899 — https://support.microsoft.com/help/5036894
10.0.19044.4291 — https://support.microsoft.com/help/5036892
10.0.22621.3447 — https://support.microsoft.com/help/5036893
10.0.25398.830 — https://support.microsoft.com/help/5036910
10.0.10240.20596 — https://support.microsoft.com/help/5036925
10.0.14393.6897 — https://support.microsoft.com/help/5036899
6.2.9200.24821 — https://support.microsoft.com/help/5036969
6.3.9600.21924 — https://support.microsoft.com/help/5036960

Vulnerabilities 1

Revision history

  1. #1

    Information published.

References