CVE

By Tammy K., 22 January, 2025

An ESET researcher recently identified a critical vulnerability in the UEFI Secure Boot mechanism, designated as CVE-2024-7344. The affected application originates from Microsoft Corporation. UEFI Secure Boot, a vital security feature, leverages signature keys and hashes to validate binaries against the DB (allowed list) and DBX (denied list) during the boot process.