ESET Researchers Discover Vulnerable UEFI Shims Undermining Secure Boot

ESET researchers have identified 11 vulnerable UEFI shim bootloaders, signed by Microsoft, that could allow attackers to bypass UEFI Secure Boot. These vulnerabilities, some dating back a decade, affect any UEFI-based machine trusting the Microsoft Corporation UEFI CA 2011 third-party UEFI certificate authority.