CVE-2022-21894

—

CVSS 3.1

4.4 medium

EPSS

7%p93

Published

Jan 11, 2022 (Jan 11, 2022)

Modified

Jun 17, 2026

Description

Secure Boot Security Feature Bypass Vulnerability

Vendors: microsoft
Products: windows 10, windows 11, windows 8.1, windows server, windows server 2012, windows server 2016, windows server 2019
Weakness: CWE-863
Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N

NVD CVE.org GitHub PoCs EPSS (6.6%)

In the news11 stories

BlackLotus Becomes First UEFI Bootkit Malware to Bypass Secure Boot on Windows 11

The Hacker NewsJun 23, 08:42 UTC · Jun 23, 2023Malware in the wildCVE-2022-218941

60

Microsoft's May Patch Tuesday Fixes 38 Flaws, Including 2 Exploited Zero

The Hacker NewsMay 15, 00:00 UTC · May 15, 2023Vulnerability in the wildCVE-2023-29336 CVE-2023-29325 CVE-2023-24932+1 CVEs

60

Microsoft fixes two actively exploited bugs, one used by BlackLotus bootkit (CVE-2023-29336, CVE-2023-24932)

Help Net SecurityMay 9, 00:00 UTC · May 9, 2023Vulnerability in the wildCVE-2023-29336 CVE-2023-24932 CVE-2022-21882+10 CVEs1

60

BlackLotus UEFI bootkit disables Windows security mechanisms

Help Net SecurityApr 17, 10:14 UTC · Apr 17, 2023Vulnerability in the wildCVE-2022-21894

60

Urgent: Microsoft Issues Patches for 97 Flaws, Including Active Ransomware Exploit

The Hacker NewsApr 15, 00:00 UTC · Apr 15, 2023Ransomware in the wildCVE-2023-28252 CVE-2022-24521 CVE-2022-37969+6 CVEs

60

BlackLotus Malware Hijacks Windows Secure Boot Process

Schneier on SecurityMar 15, 00:00 UTC · Mar 15, 2023Malware in the wildCVE-2022-21894

60

BlackLotus is first bootkit bypassing UEFI Secure Boot on Win 11

Security AffairsMar 1, 20:57 UTC · Mar 1, 2023Vulnerability CVE-2022-21894

60

Source code of the BlackLotus UEFI Bootkit was leaked on GitHub

Security AffairsJul 14, 21:31 UTC · Jul 14, 2023Vulnerability CVE-2022-218941

47

NSA Releases Guide to Mitigate BlackLotus Bootkit Infections

Infosecurity MagazineJun 26, 16:30 UTC · Jun 26, 2023Vulnerability CVE-2022-21894

35

NSA Releases Guide to Combat Powerful BlackLotus Bootkit Targeting Windows Systems

The Hacker NewsJun 24, 15:03 UTC · Jun 24, 2023Vulnerability CVE-2022-21894 CVE-2023-24932

35

NSA warns of ‘false sense of security’ against BlackLotus malware

The RecordJun 22, 17:31 UTC · Jun 22, 2023Malware CVE-2022-218941

35