Microsoft’s CVE-2026-0390 is another reminder that Secure Boot is only as strong as the trust chain behind it. The vulnerability, described by Microsoft as a UEFI Secure Boot security feature bypass, affects the Windows Boot Loader and is framed as a local issue that could let an authorized...
Microsoft’s CVE-2026-23352 advisory points to a low-level but strategically important UEFI/boot-path issue in the Windows x86 firmware stack, and the key fix — deferring the freeing of boot services memory — suggests the bug sits squarely in the messy transition between firmware-controlled...