Skip to content
Threat Feed
Subscribe

Tag

Uefi

3 briefs RSS
high advisory

CVE-2026-8863 UEFI Secure Boot Security Feature Bypass Vulnerability

An authorized attacker with local access can exploit CVE-2026-8863, a security feature bypass vulnerability in Windows UEFI, to circumvent Secure Boot and load unauthorized software, potentially enabling persistent rootkit installation.

PoC Windows UEFI +2 uefi secure-boot bypass windows vulnerability defense-evasion
2r 1t 1c 11i updated
high advisory

Insyde UEFI Firmware Vulnerability Allows Code Execution

A local attacker can exploit a vulnerability in Insyde UEFI Firmware to execute arbitrary program code, potentially leading to privilege escalation and system compromise.

UEFI Firmware uefi firmware code-execution privilege-escalation
2r 2t
high advisory

Insyde UEFI Firmware Vulnerabilities Allow Local Privilege Escalation

Multiple vulnerabilities in Insyde UEFI Firmware allow a local attacker to execute arbitrary code with administrator privileges.

UEFI Firmware uefi privilege-escalation firmware
2r 1t