msrc_cve-2023-24932
Vulnerability from csaf_microsoft
Published
2023-05-09 07:00
Modified
2025-07-10 07:00
Summary
Secure Boot Security Feature Bypass Vulnerability
Notes
Additional Resources
To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle
Disclaimer
The information provided in the Microsoft Knowledge Base is provided \"as is\" without warranty of any kind. Microsoft disclaims all warranties, either express or implied, including the warranties of merchantability and fitness for a particular purpose. In no event shall Microsoft Corporation or its suppliers be liable for any damages whatsoever including direct, indirect, incidental, consequential, loss of business profits or special damages, even if Microsoft Corporation or its suppliers have been advised of the possibility of such damages. Some states do not allow the exclusion or limitation of liability for consequential or incidental damages so the foregoing limitation may not apply.
Customer Action
Required. The vulnerability documented by this CVE requires customer action to resolve.
{
"document": {
"acknowledgments": [
{
"names": [
"Tomer Sne-or with SentinelOne"
]
},
{
"names": [
"Martin Smolar with ESET"
]
},
{
"names": [
"Zammis Clark"
]
}
],
"aggregate_severity": {
"namespace": "https://www.microsoft.com/en-us/msrc/security-update-severity-rating-system",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Public",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en-US",
"notes": [
{
"category": "general",
"text": "To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle",
"title": "Additional Resources"
},
{
"category": "legal_disclaimer",
"text": "The information provided in the Microsoft Knowledge Base is provided \\\"as is\\\" without warranty of any kind. Microsoft disclaims all warranties, either express or implied, including the warranties of merchantability and fitness for a particular purpose. In no event shall Microsoft Corporation or its suppliers be liable for any damages whatsoever including direct, indirect, incidental, consequential, loss of business profits or special damages, even if Microsoft Corporation or its suppliers have been advised of the possibility of such damages. Some states do not allow the exclusion or limitation of liability for consequential or incidental damages so the foregoing limitation may not apply.",
"title": "Disclaimer"
},
{
"category": "general",
"text": "Required. The vulnerability documented by this CVE requires customer action to resolve.",
"title": "Customer Action"
}
],
"publisher": {
"category": "vendor",
"contact_details": "secure@microsoft.com",
"name": "Microsoft Security Response Center",
"namespace": "https://msrc.microsoft.com"
},
"references": [
{
"category": "self",
"summary": "CVE-2023-24932 Secure Boot Security Feature Bypass Vulnerability - HTML",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24932"
},
{
"category": "self",
"summary": "CVE-2023-24932 Secure Boot Security Feature Bypass Vulnerability - CSAF",
"url": "https://msrc.microsoft.com/csaf/advisories/2023/msrc_cve-2023-24932.json"
},
{
"category": "external",
"summary": "Microsoft Exploitability Index",
"url": "https://www.microsoft.com/en-us/msrc/exploitability-index?rtc=1"
},
{
"category": "external",
"summary": "Microsoft Support Lifecycle",
"url": "https://support.microsoft.com/lifecycle"
},
{
"category": "external",
"summary": "Common Vulnerability Scoring System",
"url": "https://www.first.org/cvss"
}
],
"title": "Secure Boot Security Feature Bypass Vulnerability",
"tracking": {
"current_release_date": "2025-07-10T07:00:00.000Z",
"generator": {
"date": "2025-07-10T16:38:41.730Z",
"engine": {
"name": "MSRC Generator",
"version": "1.0"
}
},
"id": "msrc_CVE-2023-24932",
"initial_release_date": "2023-05-09T07:00:00.000Z",
"revision_history": [
{
"date": "2023-05-09T07:00:00.000Z",
"legacy_version": "1",
"number": "1",
"summary": "Information published."
},
{
"date": "2023-07-11T07:00:00.000Z",
"legacy_version": "2",
"number": "2",
"summary": "In the Security Updates table, added all supported versions of all supported versions of .NET Framework, Visual Studio 2022 version 17.0, Visual Studio 2022 version 17.2, and Visual Studio 2022 version 17.4 because these products are also affected by this vulnerability. Microsoft strongly recommends that customers running any of these products install the updates to be fully protected from the vulnerability. Customers whose systems are configured to receive automatic updates do not need to take any further action."
},
{
"date": "2023-07-14T07:00:00.000Z",
"legacy_version": "2.1",
"number": "3",
"summary": "CORRECTED REVISION: To comprehensively address CVE-2023-24932, Microsoft has released July 2023 security updates for all affected versions of Microsoft Windows. Microsoft strongly recommends that customers install the updates to be fully protected from the vulnerability. Additional steps are required after the update is installed. See [KB5025885: How to manage the Windows Boot Manager revocations for Secure Boot changes associated with CVE-2023-24932](https://support.microsoft.com/help/5025885) for more information."
},
{
"date": "2023-07-18T07:00:00.000Z",
"legacy_version": "2.2",
"number": "4",
"summary": "Removed the Security Hotpatch Update for the July 2023 revision as that package doesn\u0027t exist for this release cycle. You must install the Security Update to get the updated software."
},
{
"date": "2024-01-26T08:00:00.000Z",
"legacy_version": "2.3",
"number": "5",
"summary": "Updated FAQs to include information on how to be protected from this vulnerability for customers running Windows 11 23H2 or Windows Server 2022, 23H2 Edition. This is an informational change only."
},
{
"date": "2024-04-09T07:00:00.000Z",
"legacy_version": "3",
"number": "6",
"summary": "In the Security Updates table, added Windows 11 version 23H2 for x64-based systems and Windows 11 version 23H2 for ARM-based systems because the April 2024 security updates provide the latest mitigations. Note that these mitigations are off by default. Customers who should take additional steps to implement security mitigations for a publicly disclosed Secure Boot bypass leveraged by the BlackLotus UEFI bootkit and who would like to take a proactive security stance or to begin preparing for the rollout, please refer to [KB5025885: How to manage the Windows Boot Manager revocations for Secure Boot changes associated with CVE-2023-24932 - Microsoft Support](https://support.microsoft.com/help/5025885)."
},
{
"date": "2024-07-09T07:00:00.000Z",
"legacy_version": "4",
"number": "7",
"summary": "Updated the Security Updates table to include the July 9, 2024 updates. These updates include support for opting into an updated Secure Version Number to block older boot managers."
},
{
"date": "2025-02-11T08:00:00.000Z",
"legacy_version": "5",
"number": "8",
"summary": "The following updates have been made to CVE-2023-24932: 1) In the Security Updates table, added all supported versions of the following as they are affected by this vulnerability: Windows 11 24H2 and Windows Server 2025. 2) Further, to comprehensively address this vulnerability, Microsoft has released February 2025 security updates for all affected versions of Windows 11 version 22H2 and Windows 11 version 23H2. \n\nMicrosoft recommends that customers install the updates to be fully protected from the vulnerability. Customers whose systems are configured to receive automatic updates do not need to take any further action."
},
{
"date": "2025-07-10T07:00:00.000Z",
"legacy_version": "6",
"number": "9",
"summary": "Microsoft has released July 8, 2025 security updates for all supported versions of Windows that provide new mitigations to protect against this vulnerability; however, these mitigations are not enabled by default. After you have installed the updates, follow the steps outlined in [KB5025885: How to manage the Windows Boot Manager revocations for Secure Boot changes associated with CVE-2023-24932](https://support.microsoft.com/help/5025885) to enable these protections.\n\nAll Windows devices should have the the July 8, 2025 security updates installed regardless of your plan to enable the mitigations."
}
],
"status": "final",
"version": "9"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c10.0.26100.4652",
"product": {
"name": "Windows Server 2025 (Server Core installation) \u003c10.0.26100.4652",
"product_id": "1"
}
},
{
"category": "product_version",
"name": "10.0.26100.4652",
"product": {
"name": "Windows Server 2025 (Server Core installation) 10.0.26100.4652",
"product_id": "12437"
}
}
],
"category": "product_name",
"name": "Windows Server 2025 (Server Core installation)"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c10.0.26100.4652",
"product": {
"name": "Windows 11 Version 24H2 for ARM64-based Systems \u003c10.0.26100.4652",
"product_id": "4"
}
},
{
"category": "product_version",
"name": "10.0.26100.4652",
"product": {
"name": "Windows 11 Version 24H2 for ARM64-based Systems 10.0.26100.4652",
"product_id": "12389"
}
}
],
"category": "product_name",
"name": "Windows 11 Version 24H2 for ARM64-based Systems"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c0.0.26200.4652",
"product": {
"name": "Windows 11 Version 24H2 for x64-based Systems \u003c0.0.26200.4652",
"product_id": "3"
}
},
{
"category": "product_version",
"name": "0.0.26200.4652",
"product": {
"name": "Windows 11 Version 24H2 for x64-based Systems 0.0.26200.4652",
"product_id": "12390"
}
}
],
"category": "product_name",
"name": "Windows 11 Version 24H2 for x64-based Systems"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c10.0.26100.4652",
"product": {
"name": "Windows Server 2025 \u003c10.0.26100.4652",
"product_id": "2"
}
},
{
"category": "product_version",
"name": "10.0.26100.4652",
"product": {
"name": "Windows Server 2025 10.0.26100.4652",
"product_id": "12436"
}
}
],
"category": "product_name",
"name": "Windows Server 2025"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c10.0.17763.7558",
"product": {
"name": "Windows 10 Version 1809 for 32-bit Systems \u003c10.0.17763.7558",
"product_id": "26"
}
},
{
"category": "product_version",
"name": "10.0.17763.7558",
"product": {
"name": "Windows 10 Version 1809 for 32-bit Systems 10.0.17763.7558",
"product_id": "11568"
}
}
],
"category": "product_name",
"name": "Windows 10 Version 1809 for 32-bit Systems"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c10.0.17763.7558",
"product": {
"name": "Windows 10 Version 1809 for x64-based Systems \u003c10.0.17763.7558",
"product_id": "25"
}
},
{
"category": "product_version",
"name": "10.0.17763.7558",
"product": {
"name": "Windows 10 Version 1809 for x64-based Systems 10.0.17763.7558",
"product_id": "11569"
}
}
],
"category": "product_name",
"name": "Windows 10 Version 1809 for x64-based Systems"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c10.0.17763.6054",
"product": {
"name": "Windows 10 Version 1809 for ARM64-based Systems \u003c10.0.17763.6054",
"product_id": "24"
}
},
{
"category": "product_version",
"name": "10.0.17763.6054",
"product": {
"name": "Windows 10 Version 1809 for ARM64-based Systems 10.0.17763.6054",
"product_id": "11570"
}
}
],
"category": "product_name",
"name": "Windows 10 Version 1809 for ARM64-based Systems"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c10.0.17763.7558",
"product": {
"name": "Windows Server 2019 \u003c10.0.17763.7558",
"product_id": "23"
}
},
{
"category": "product_version",
"name": "10.0.17763.7558",
"product": {
"name": "Windows Server 2019 10.0.17763.7558",
"product_id": "11571"
}
}
],
"category": "product_name",
"name": "Windows Server 2019"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c10.0.17763.7558",
"product": {
"name": "Windows Server 2019 (Server Core installation) \u003c10.0.17763.7558",
"product_id": "22"
}
},
{
"category": "product_version",
"name": "10.0.17763.7558",
"product": {
"name": "Windows Server 2019 (Server Core installation) 10.0.17763.7558",
"product_id": "11572"
}
}
],
"category": "product_name",
"name": "Windows Server 2019 (Server Core installation)"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c10.0.20348.3932",
"product": {
"name": "Windows Server 2022 \u003c10.0.20348.3932",
"product_id": "19"
}
},
{
"category": "product_version",
"name": "10.0.20348.3932",
"product": {
"name": "Windows Server 2022 10.0.20348.3932",
"product_id": "11923"
}
}
],
"category": "product_name",
"name": "Windows Server 2022"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c10.0.20348.3932",
"product": {
"name": "Windows Server 2022 (Server Core installation) \u003c10.0.20348.3932",
"product_id": "18"
}
},
{
"category": "product_version",
"name": "10.0.20348.3932",
"product": {
"name": "Windows Server 2022 (Server Core installation) 10.0.20348.3932",
"product_id": "11924"
}
}
],
"category": "product_name",
"name": "Windows Server 2022 (Server Core installation)"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c10.0.19042.2965",
"product": {
"name": "Windows 10 Version 20H2 for 32-bit Systems \u003c10.0.19042.2965",
"product_id": "21"
}
},
{
"category": "product_version",
"name": "10.0.19042.2965",
"product": {
"name": "Windows 10 Version 20H2 for 32-bit Systems 10.0.19042.2965",
"product_id": "11801"
}
}
],
"category": "product_name",
"name": "Windows 10 Version 20H2 for 32-bit Systems"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c10.0.19042.2965",
"product": {
"name": "Windows 10 Version 20H2 for ARM64-based Systems \u003c10.0.19042.2965",
"product_id": "20"
}
},
{
"category": "product_version",
"name": "10.0.19042.2965",
"product": {
"name": "Windows 10 Version 20H2 for ARM64-based Systems 10.0.19042.2965",
"product_id": "11802"
}
}
],
"category": "product_name",
"name": "Windows 10 Version 20H2 for ARM64-based Systems"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c10.0.22000.3079",
"product": {
"name": "Windows 11 version 21H2 for x64-based Systems \u003c10.0.22000.3079",
"product_id": "17"
}
},
{
"category": "product_version",
"name": "10.0.22000.3079",
"product": {
"name": "Windows 11 version 21H2 for x64-based Systems 10.0.22000.3079",
"product_id": "11926"
}
}
],
"category": "product_name",
"name": "Windows 11 version 21H2 for x64-based Systems"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c10.0.22000.3079",
"product": {
"name": "Windows 11 version 21H2 for ARM64-based Systems \u003c10.0.22000.3079",
"product_id": "16"
}
},
{
"category": "product_version",
"name": "10.0.22000.3079",
"product": {
"name": "Windows 11 version 21H2 for ARM64-based Systems 10.0.22000.3079",
"product_id": "11927"
}
}
],
"category": "product_name",
"name": "Windows 11 version 21H2 for ARM64-based Systems"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c10.0.19044.6093",
"product": {
"name": "Windows 10 Version 21H2 for 32-bit Systems \u003c10.0.19044.6093",
"product_id": "15"
}
},
{
"category": "product_version",
"name": "10.0.19044.6093",
"product": {
"name": "Windows 10 Version 21H2 for 32-bit Systems 10.0.19044.6093",
"product_id": "11929"
}
}
],
"category": "product_name",
"name": "Windows 10 Version 21H2 for 32-bit Systems"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c10.0.19044.6093",
"product": {
"name": "Windows 10 Version 21H2 for ARM64-based Systems \u003c10.0.19044.6093",
"product_id": "14"
}
},
{
"category": "product_version",
"name": "10.0.19044.6093",
"product": {
"name": "Windows 10 Version 21H2 for ARM64-based Systems 10.0.19044.6093",
"product_id": "11930"
}
}
],
"category": "product_name",
"name": "Windows 10 Version 21H2 for ARM64-based Systems"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c10.0.19044.6093",
"product": {
"name": "Windows 10 Version 21H2 for x64-based Systems \u003c10.0.19044.6093",
"product_id": "13"
}
},
{
"category": "product_version",
"name": "10.0.19044.6093",
"product": {
"name": "Windows 10 Version 21H2 for x64-based Systems 10.0.19044.6093",
"product_id": "11931"
}
}
],
"category": "product_name",
"name": "Windows 10 Version 21H2 for x64-based Systems"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c10.0.22621.5624",
"product": {
"name": "Windows 11 Version 22H2 for ARM64-based Systems \u003c10.0.22621.5624",
"product_id": "12"
}
},
{
"category": "product_version",
"name": "10.0.22621.5624",
"product": {
"name": "Windows 11 Version 22H2 for ARM64-based Systems 10.0.22621.5624",
"product_id": "12085"
}
}
],
"category": "product_name",
"name": "Windows 11 Version 22H2 for ARM64-based Systems"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c10.0.22621.5624",
"product": {
"name": "Windows 11 Version 22H2 for x64-based Systems \u003c10.0.22621.5624",
"product_id": "11"
}
},
{
"category": "product_version",
"name": "10.0.22621.5624",
"product": {
"name": "Windows 11 Version 22H2 for x64-based Systems 10.0.22621.5624",
"product_id": "12086"
}
}
],
"category": "product_name",
"name": "Windows 11 Version 22H2 for x64-based Systems"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c10.0.19045.6093",
"product": {
"name": "Windows 10 Version 22H2 for x64-based Systems \u003c10.0.19045.6093",
"product_id": "10"
}
},
{
"category": "product_version",
"name": "10.0.19045.6093",
"product": {
"name": "Windows 10 Version 22H2 for x64-based Systems 10.0.19045.6093",
"product_id": "12097"
}
}
],
"category": "product_name",
"name": "Windows 10 Version 22H2 for x64-based Systems"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c10.0.19045.6093",
"product": {
"name": "Windows 10 Version 22H2 for ARM64-based Systems \u003c10.0.19045.6093",
"product_id": "9"
}
},
{
"category": "product_version",
"name": "10.0.19045.6093",
"product": {
"name": "Windows 10 Version 22H2 for ARM64-based Systems 10.0.19045.6093",
"product_id": "12098"
}
}
],
"category": "product_name",
"name": "Windows 10 Version 22H2 for ARM64-based Systems"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c10.0.19045.6093",
"product": {
"name": "Windows 10 Version 22H2 for 32-bit Systems \u003c10.0.19045.6093",
"product_id": "8"
}
},
{
"category": "product_version",
"name": "10.0.19045.6093",
"product": {
"name": "Windows 10 Version 22H2 for 32-bit Systems 10.0.19045.6093",
"product_id": "12099"
}
}
],
"category": "product_name",
"name": "Windows 10 Version 22H2 for 32-bit Systems"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c10.0.22631.5624",
"product": {
"name": "Windows 11 Version 23H2 for ARM64-based Systems \u003c10.0.22631.5624",
"product_id": "7"
}
},
{
"category": "product_version",
"name": "10.0.22631.5624",
"product": {
"name": "Windows 11 Version 23H2 for ARM64-based Systems 10.0.22631.5624",
"product_id": "12242"
}
}
],
"category": "product_name",
"name": "Windows 11 Version 23H2 for ARM64-based Systems"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c10.0.22631.5624",
"product": {
"name": "Windows 11 Version 23H2 for x64-based Systems \u003c10.0.22631.5624",
"product_id": "6"
}
},
{
"category": "product_version",
"name": "10.0.22631.5624",
"product": {
"name": "Windows 11 Version 23H2 for x64-based Systems 10.0.22631.5624",
"product_id": "12243"
}
}
],
"category": "product_name",
"name": "Windows 11 Version 23H2 for x64-based Systems"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c10.0.25398.1732",
"product": {
"name": "Windows Server 2022, 23H2 Edition (Server Core installation) \u003c10.0.25398.1732",
"product_id": "5"
}
},
{
"category": "product_version",
"name": "10.0.25398.1732",
"product": {
"name": "Windows Server 2022, 23H2 Edition (Server Core installation) 10.0.25398.1732",
"product_id": "12244"
}
}
],
"category": "product_name",
"name": "Windows Server 2022, 23H2 Edition (Server Core installation)"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c10.0.10240.21073",
"product": {
"name": "Windows 10 for 32-bit Systems \u003c10.0.10240.21073",
"product_id": "32"
}
},
{
"category": "product_version",
"name": "10.0.10240.21073",
"product": {
"name": "Windows 10 for 32-bit Systems 10.0.10240.21073",
"product_id": "10729"
}
}
],
"category": "product_name",
"name": "Windows 10 for 32-bit Systems"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c10.0.10240.21073",
"product": {
"name": "Windows 10 for x64-based Systems \u003c10.0.10240.21073",
"product_id": "31"
}
},
{
"category": "product_version",
"name": "10.0.10240.21073",
"product": {
"name": "Windows 10 for x64-based Systems 10.0.10240.21073",
"product_id": "10735"
}
}
],
"category": "product_name",
"name": "Windows 10 for x64-based Systems"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c10.0.14393.8246",
"product": {
"name": "Windows 10 Version 1607 for 32-bit Systems \u003c10.0.14393.8246",
"product_id": "29"
}
},
{
"category": "product_version",
"name": "10.0.14393.8246",
"product": {
"name": "Windows 10 Version 1607 for 32-bit Systems 10.0.14393.8246",
"product_id": "10852"
}
}
],
"category": "product_name",
"name": "Windows 10 Version 1607 for 32-bit Systems"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c10.0.14393.8246",
"product": {
"name": "Windows 10 Version 1607 for x64-based Systems \u003c10.0.14393.8246",
"product_id": "28"
}
},
{
"category": "product_version",
"name": "10.0.14393.8246",
"product": {
"name": "Windows 10 Version 1607 for x64-based Systems 10.0.14393.8246",
"product_id": "10853"
}
}
],
"category": "product_name",
"name": "Windows 10 Version 1607 for x64-based Systems"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c10.0.14393.8246",
"product": {
"name": "Windows Server 2016 \u003c10.0.14393.8246",
"product_id": "30"
}
},
{
"category": "product_version",
"name": "10.0.14393.8246",
"product": {
"name": "Windows Server 2016 10.0.14393.8246",
"product_id": "10816"
}
}
],
"category": "product_name",
"name": "Windows Server 2016"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c10.0.14393.8246",
"product": {
"name": "Windows Server 2016 (Server Core installation) \u003c10.0.14393.8246",
"product_id": "27"
}
},
{
"category": "product_version",
"name": "10.0.14393.8246",
"product": {
"name": "Windows Server 2016 (Server Core installation) 10.0.14393.8246",
"product_id": "10855"
}
}
],
"category": "product_name",
"name": "Windows Server 2016 (Server Core installation)"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c6.0.6003.23418",
"product": {
"name": "Windows Server 2008 for 32-bit Systems Service Pack 2 \u003c6.0.6003.23418",
"product_id": "42"
}
},
{
"category": "product_version",
"name": "6.0.6003.23418",
"product": {
"name": "Windows Server 2008 for 32-bit Systems Service Pack 2 6.0.6003.23418",
"product_id": "9312"
}
}
],
"category": "product_name",
"name": "Windows Server 2008 for 32-bit Systems Service Pack 2"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c6.0.6003.23418",
"product": {
"name": "Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation) \u003c6.0.6003.23418",
"product_id": "37"
}
},
{
"category": "product_version",
"name": "6.0.6003.23418",
"product": {
"name": "Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation) 6.0.6003.23418",
"product_id": "10287"
}
}
],
"category": "product_name",
"name": "Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation)"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c6.0.6003.23418",
"product": {
"name": "Windows Server 2008 for x64-based Systems Service Pack 2 \u003c6.0.6003.23418",
"product_id": "41"
}
},
{
"category": "product_version",
"name": "6.0.6003.23418",
"product": {
"name": "Windows Server 2008 for x64-based Systems Service Pack 2 6.0.6003.23418",
"product_id": "9318"
}
}
],
"category": "product_name",
"name": "Windows Server 2008 for x64-based Systems Service Pack 2"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c6.0.6003.23418",
"product": {
"name": "Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation) \u003c6.0.6003.23418",
"product_id": "40"
}
},
{
"category": "product_version",
"name": "6.0.6003.23418",
"product": {
"name": "Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation) 6.0.6003.23418",
"product_id": "9344"
}
}
],
"category": "product_name",
"name": "Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation)"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c6.1.7601.27820",
"product": {
"name": "Windows Server 2008 R2 for x64-based Systems Service Pack 1 \u003c6.1.7601.27820",
"product_id": "38"
}
},
{
"category": "product_version",
"name": "6.1.7601.27820",
"product": {
"name": "Windows Server 2008 R2 for x64-based Systems Service Pack 1 6.1.7601.27820",
"product_id": "10051"
}
}
],
"category": "product_name",
"name": "Windows Server 2008 R2 for x64-based Systems Service Pack 1"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c6.1.7601.27820",
"product": {
"name": "Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation) \u003c6.1.7601.27820",
"product_id": "39"
}
},
{
"category": "product_version",
"name": "6.1.7601.27820",
"product": {
"name": "Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation) 6.1.7601.27820",
"product_id": "10049"
}
}
],
"category": "product_name",
"name": "Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c6.2.9200.25573",
"product": {
"name": "Windows Server 2012 \u003c6.2.9200.25573",
"product_id": "36"
}
},
{
"category": "product_version",
"name": "6.2.9200.25573",
"product": {
"name": "Windows Server 2012 6.2.9200.25573",
"product_id": "10378"
}
}
],
"category": "product_name",
"name": "Windows Server 2012"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c6.2.9200.25573",
"product": {
"name": "Windows Server 2012 (Server Core installation) \u003c6.2.9200.25573",
"product_id": "35"
}
},
{
"category": "product_version",
"name": "6.2.9200.25573",
"product": {
"name": "Windows Server 2012 (Server Core installation) 6.2.9200.25573",
"product_id": "10379"
}
}
],
"category": "product_name",
"name": "Windows Server 2012 (Server Core installation)"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c6.3.9600.22676",
"product": {
"name": "Windows Server 2012 R2 \u003c6.3.9600.22676",
"product_id": "34"
}
},
{
"category": "product_version",
"name": "6.3.9600.22676",
"product": {
"name": "Windows Server 2012 R2 6.3.9600.22676",
"product_id": "10483"
}
}
],
"category": "product_name",
"name": "Windows Server 2012 R2"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c6.3.9600.22676",
"product": {
"name": "Windows Server 2012 R2 (Server Core installation) \u003c6.3.9600.22676",
"product_id": "33"
}
},
{
"category": "product_version",
"name": "6.3.9600.22676",
"product": {
"name": "Windows Server 2012 R2 (Server Core installation) 6.3.9600.22676",
"product_id": "10543"
}
}
],
"category": "product_name",
"name": "Windows Server 2012 R2 (Server Core installation)"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2023-24932",
"notes": [
{
"category": "general",
"text": "Microsoft",
"title": "Assigning CNA"
},
{
"category": "faq",
"text": "Successful exploitation of this vulnerability requires an attacker to compromise admin credentials on the device.",
"title": "According to the CVSS metric, privileges required is high (PR:H). What does that mean for this vulnerability?"
},
{
"category": "faq",
"text": "To exploit the vulnerability, an attacker who has physical access or Administrative rights to a target device could install an affected boot policy.",
"title": "How can an attacker successfully exploit this vulnerability?"
},
{
"category": "faq",
"text": "An attacker who successfully exploited this vulnerability could bypass Secure Boot.",
"title": "What kind of security feature could be bypassed by successfully exploiting this vulnerability?"
},
{
"category": "faq",
"text": "The security update addresses the vulnerability by updating the Windows Boot Manager, but is not enabled by default. Additional steps are required at this time to mitigate the vulnerability. Please refer to the following for steps to determine impact on your environment: KB5025885: How to manage the Windows Boot Manager revocations for Secure Boot changes associated with CVE-2023-24932.",
"title": "Are there additional steps I need to take to be protected from this vulnerability?"
},
{
"category": "faq",
"text": "Protections for the Secure Boot bypass were included in Windows 11 Version 23H3 and Windows Server 2022, 23H2 Edition at the time of their release; however, these protections are not enabled by default. Customers running these versions of Windows must enable the protections as outlined in KB5025885: How to manage the Windows Boot Manager revocations for Secure Boot changes associated with CVE-2023-24932.",
"title": "I am running Window 11 23H2 or Server 2022, 23H2 Edition, What do I need to do to be protected from this vulnerability?"
}
],
"product_status": {
"fixed": [
"9312",
"9318",
"9344",
"10049",
"10051",
"10287",
"10378",
"10379",
"10483",
"10543",
"10729",
"10735",
"10816",
"10852",
"10853",
"10855",
"11568",
"11569",
"11570",
"11571",
"11572",
"11801",
"11802",
"11923",
"11924",
"11926",
"11927",
"11929",
"11930",
"11931",
"12085",
"12086",
"12097",
"12098",
"12099",
"12242",
"12243",
"12244",
"12389",
"12390",
"12436",
"12437"
],
"known_affected": [
"1",
"2",
"3",
"4",
"5",
"6",
"7",
"8",
"9",
"10",
"11",
"12",
"13",
"14",
"15",
"16",
"17",
"18",
"19",
"20",
"21",
"22",
"23",
"24",
"25",
"26",
"27",
"28",
"29",
"30",
"31",
"32",
"33",
"34",
"35",
"36",
"37",
"38",
"39",
"40",
"41",
"42"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2023-24932 Secure Boot Security Feature Bypass Vulnerability - HTML",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24932"
},
{
"category": "self",
"summary": "CVE-2023-24932 Secure Boot Security Feature Bypass Vulnerability - CSAF",
"url": "https://msrc.microsoft.com/csaf/advisories/2023/msrc_cve-2023-24932.json"
}
],
"remediations": [
{
"category": "vendor_fix",
"date": "2023-05-09T07:00:00.000Z",
"details": "10.0.26100.4652:Security Update:https://support.microsoft.com/help/5062553",
"product_ids": [
"1",
"4",
"2"
],
"url": "https://support.microsoft.com/help/5062553"
},
{
"category": "vendor_fix",
"date": "2023-05-09T07:00:00.000Z",
"details": "0.0.26200.4652:Security Update:https://support.microsoft.com/help/5062553",
"product_ids": [
"3"
],
"url": "https://support.microsoft.com/help/5062553"
},
{
"category": "vendor_fix",
"date": "2023-05-09T07:00:00.000Z",
"details": "10.0.17763.7558:Security Update:https://support.microsoft.com/help/5062557",
"product_ids": [
"26",
"25",
"23",
"22"
],
"url": "https://support.microsoft.com/help/5062557"
},
{
"category": "vendor_fix",
"date": "2023-05-09T07:00:00.000Z",
"details": "10.0.17763.6054:Security Update:https://support.microsoft.com/help/5040430",
"product_ids": [
"24"
],
"url": "https://support.microsoft.com/help/5040430"
},
{
"category": "vendor_fix",
"date": "2023-05-09T07:00:00.000Z",
"details": "10.0.20348.3932:Security Update:https://support.microsoft.com/help/5062572",
"product_ids": [
"19",
"18"
],
"url": "https://support.microsoft.com/help/5062572"
},
{
"category": "vendor_fix",
"date": "2023-05-09T07:00:00.000Z",
"details": "10.0.19042.2965:Security Update:https://support.microsoft.com/help/5026361",
"product_ids": [
"21",
"20"
],
"url": "https://support.microsoft.com/help/5026361"
},
{
"category": "vendor_fix",
"date": "2023-05-09T07:00:00.000Z",
"details": "10.0.22000.3079:Security Update:https://support.microsoft.com/help/5040431",
"product_ids": [
"17",
"16"
],
"url": "https://support.microsoft.com/help/5040431"
},
{
"category": "vendor_fix",
"date": "2023-05-09T07:00:00.000Z",
"details": "10.0.19044.6093:Security Update:https://support.microsoft.com/help/5062554",
"product_ids": [
"15",
"14",
"13"
],
"url": "https://support.microsoft.com/help/5062554"
},
{
"category": "vendor_fix",
"date": "2023-05-09T07:00:00.000Z",
"details": "10.0.22621.5624:Security Update:https://support.microsoft.com/help/5062552",
"product_ids": [
"12",
"11"
],
"url": "https://support.microsoft.com/help/5062552"
},
{
"category": "vendor_fix",
"date": "2023-05-09T07:00:00.000Z",
"details": "10.0.19045.6093:Security Update:https://support.microsoft.com/help/5062554",
"product_ids": [
"10",
"9",
"8"
],
"url": "https://support.microsoft.com/help/5062554"
},
{
"category": "vendor_fix",
"date": "2023-05-09T07:00:00.000Z",
"details": "10.0.22631.5624:Security Update:https://support.microsoft.com/help/5062552",
"product_ids": [
"7",
"6"
],
"url": "https://support.microsoft.com/help/5062552"
},
{
"category": "vendor_fix",
"date": "2023-05-09T07:00:00.000Z",
"details": "10.0.25398.1732:Security Update:https://support.microsoft.com/help/5062570",
"product_ids": [
"5"
],
"url": "https://support.microsoft.com/help/5062570"
},
{
"category": "vendor_fix",
"date": "2023-05-09T07:00:00.000Z",
"details": "10.0.10240.21073:Security Update:https://support.microsoft.com/help/5062561",
"product_ids": [
"32",
"31"
],
"url": "https://support.microsoft.com/help/5062561"
},
{
"category": "vendor_fix",
"date": "2023-05-09T07:00:00.000Z",
"details": "10.0.14393.8246:Security Update:https://support.microsoft.com/help/5062560",
"product_ids": [
"29",
"28",
"30",
"27"
],
"url": "https://support.microsoft.com/help/5062560"
},
{
"category": "vendor_fix",
"date": "2023-05-09T07:00:00.000Z",
"details": "6.0.6003.23418:Monthly Rollup:https://support.microsoft.com/help/5062624",
"product_ids": [
"42",
"37",
"41",
"40"
],
"url": "https://support.microsoft.com/help/5062624"
},
{
"category": "vendor_fix",
"date": "2023-05-09T07:00:00.000Z",
"details": "6.0.6003.23418:Security Only:https://support.microsoft.com/help/5062618",
"product_ids": [
"42",
"37",
"41",
"40"
],
"url": "https://support.microsoft.com/help/5062618"
},
{
"category": "vendor_fix",
"date": "2023-05-09T07:00:00.000Z",
"details": "6.1.7601.27820:Monthly Rollup:https://support.microsoft.com/help/5062632",
"product_ids": [
"38",
"39"
],
"url": "https://support.microsoft.com/help/5062632"
},
{
"category": "vendor_fix",
"date": "2023-05-09T07:00:00.000Z",
"details": "6.1.7601.27820:Security Only:https://support.microsoft.com/help/5062619",
"product_ids": [
"38",
"39"
],
"url": "https://support.microsoft.com/help/5062619"
},
{
"category": "vendor_fix",
"date": "2023-05-09T07:00:00.000Z",
"details": "6.2.9200.25573:Monthly Rollup:https://support.microsoft.com/help/5062592",
"product_ids": [
"36",
"35"
],
"url": "https://support.microsoft.com/help/5062592"
},
{
"category": "vendor_fix",
"date": "2023-05-09T07:00:00.000Z",
"details": "6.3.9600.22676:Monthly Rollup:https://support.microsoft.com/help/5062597",
"product_ids": [
"34",
"33"
],
"url": "https://support.microsoft.com/help/5062597"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 6.7,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"environmentalsScore": 0.0,
"exploitCodeMaturity": "FUNCTIONAL",
"integrityImpact": "HIGH",
"privilegesRequired": "HIGH",
"remediationLevel": "OFFICIAL_FIX",
"reportConfidence": "CONFIRMED",
"scope": "UNCHANGED",
"temporalScore": 6.2,
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5",
"6",
"7",
"8",
"9",
"10",
"11",
"12",
"13",
"14",
"15",
"16",
"17",
"18",
"19",
"20",
"21",
"22",
"23",
"24",
"25",
"26",
"27",
"28",
"29",
"30",
"31",
"32",
"33",
"34",
"35",
"36",
"37",
"38",
"39",
"40",
"41",
"42"
]
}
],
"threats": [
{
"category": "impact",
"details": "Security Feature Bypass"
},
{
"category": "exploit_status",
"details": "Publicly Disclosed:Yes;Exploited:Yes;Latest Software Release:Exploitation Detected"
}
],
"title": "Secure Boot Security Feature Bypass Vulnerability"
}
]
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.
Loading…
Loading…