CVE-2026-25250

CVE

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

April 14, 2026

Last Seen

July 14, 2026

API

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Old UEFI Shims Exploit Bypass of Secure Boot Security70.5

ESET researchers have discovered 11 outdated UEFI shim bootloaders, all version 0.9 or below, that can bypass UEFI Secure Boot protections on systems trusting Microsoft's 2011 certificate. These vulnerabilities allow attackers to execute untrusted code during the boot process, enabling the deploymen...

BlueHammer Zero-Day Exploit Released, Exposing Windows Users to Privilege Escalation66.6

A security researcher, known as Chaotic Eclipse, has publicly released exploit code for a zero-day vulnerability in Windows, dubbed BlueHammer, allowing local privilege escalation to SYSTEM or elevated administrator privileges. The exploit targets a flaw in the Windows Defender update mechanism and...