⚠ Exploited in the wild
Exploitation observed in the wild. Not yet on CISA KEV.

CVE-2023-24932

CWE-284 — Improper Access ControlCWE-121 — Stack-based Buffer OverflowCWE-122 — Heap-based Buffer OverflowCWE-693CWE-190 — Integer OverflowCWE-125 — Out-of-bounds Read14 documents4 sources
Severity
6.7MEDIUM
No vector
EPSS
0.6%
top 31.58%
CISA KEV
Not in KEV
Exploit
Exploited in wild
Active exploitation observed
Affected products
26
Microsoft Windows 10 Version 1507Microsoft Windows 10 Version 1607Microsoft Windows 10 Version 1809+23 more
Timeline
PublishedMay 9
Latest updateApr 9

Description

Secure Boot Security Feature Bypass Vulnerability Secure Boot Security Feature Bypass Vulnerability

Affected Packages26 packages

▶CVEListV5microsoft/windows_server_20126.2.9200.0 — 6.2.9200.25573
▶CVEListV5microsoft/windows_server_201610.0.14393.0 — 10.0.14393.8246
▶CVEListV5microsoft/windows_server_201910.0.17763.0 — 10.0.17763.7558
▶CVEListV5microsoft/windows_server_202210.0.20348.0 — 10.0.20348.3932
▶CVEListV5microsoft/windows_server_202510.0.26100.0 — 10.0.26100.4652

🔴Vulnerability Details

2
CVEList
Secure Boot Security Feature Bypass Vulnerability↗2023-05-09
▶
VulnCheck
Secure Boot Security Feature Bypass Vulnerability↗2023
▶

📋Vendor Advisories

6
Microsoft
Secure Boot Security Feature Bypass Vulnerability↗2024-04-09
▶
Microsoft
Secure Boot Security Feature Bypass Vulnerability↗2024-04-09
▶
Microsoft
Secure Boot Security Feature Bypass Vulnerability↗2024-04-09
▶
Microsoft
Secure Boot Security Feature Bypass Vulnerability↗2024-04-09
▶
Microsoft
Secure Boot Security Feature Bypass Vulnerability↗2024-04-09
▶

🕵️Threat Intelligence

1
Huntress
CVE-2023-24932 (Secure Boot Bypass) Vulnerability: Analysis, Impact, Mitigation | Huntress↗
▶
CVE-2023-24932 (MEDIUM CVSS 6.7) | Secure Boot Security Feature Bypass | cvebase.io