11 Old Microsoft-Signed Linux UEFI Shims Could Let Attackers Bypass Secure Boot

Cybersecurity researchers have found 11 outdated Microsoft-signed UEFI applications that could be exploited to bypass Secure Boot on systems using the UEFI firmware standard. These vulnerable applications can be used to execute untrusted code during system boot. An attacker exploiting one of these vulnerabilities can deploy malicious UEFI bootkits or other malware. This could potentially allow attackers to run malicious code on systems that are supposed to be protected by Secure Boot. The vulnerable applications are Microsoft-signed, which could make them appear trustworthy to systems. Exploiting these vulnerabilities enables the deployment of malware during the boot process.