Back Gbhackers

UEFI DBX Update Guidance Targets Vulnerable Vendor

Gbhackers •Divya • June 19, 2026

A recently disclosed vulnerability inc, which affects UEFI applications signed by multiple vendors, has prompted urgent recommendations to update the UEFI Forbidden Signature Database (DBX). This issue, tracked as VU#457458 and published by CERT/CC on June 18, 2026, reveals a significant weakness in trusted firmware components. It could potentially allow attackers to execute arbitrary code […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical UEFI Secure Boot Bypass Vulnerability Discovered ESET researchers identified a significant vulnerability, CVE-2024-7344, allowing bypass of UEFI Secure Boot on numerous systems. This flaw affects UEFI applications signed by multiple vendors, enabling attackers to execute untrusted code during the boot process. The vulnerability arises from a custom PE loader that permits loading unsigned UEFI binaries. Affected applications are part of recovery software from various vendors, including Howyar Technologies and Greenware Technologies. The issue was disclosed to CERT/CC in June 2024, leading to a coordinated response and revocation of vulnerable binaries by Microsoft in January 2025. System administrators are advised to update the UEFI Forbidden Signature Database (DBX) to mitigate risks. The vulnerability poses a serious threat as it can lead to persistent platform compromise before the OS initializes. 4 sources 74

UEFI DBX Update Guidance Targets Vulnerable Vendor

The full story

Extracted Entities

Companies (1)

Platforms (1)