uefi security

  1. CISA Warns ABB B&R Industrial PCs: PixieFail UEFI Network Vulnerabilities (2026)

    CISA republished ABB’s advisory for B&R industrial PCs on May 21, 2026, warning that multiple xPC firmware versions remain exposed to nine PixieFail UEFI network-stack vulnerabilities that can let a network attacker trigger code execution, denial of service, DNS cache poisoning, or data...
  2. CVE-2026-0390 Secure Boot Bypass: Protect Windows Boot Trust Chain

    Microsoft’s CVE-2026-0390 is another reminder that Secure Boot is only as strong as the trust chain behind it. The vulnerability, described by Microsoft as a UEFI Secure Boot security feature bypass, affects the Windows Boot Loader and is framed as a local issue that could let an authorized...
  3. CVE-2026-23352: Deferring UEFI Boot Services Memory Fix in Windows x86

    Microsoft’s CVE-2026-23352 advisory points to a low-level but strategically important UEFI/boot-path issue in the Windows x86 firmware stack, and the key fix — deferring the freeing of boot services memory — suggests the bug sits squarely in the messy transition between firmware-controlled...