NewA calmer, faster ZeroHour — security assessments on articles, story timelines and search from any page.

Vulnerability3 · 1 read

CVE-2023-24932

CVSS 3.1: 6.7 medium
EPSS: 11%p95
Published: May 9, 2023 · May 9, 2023
Modified: Jun 17, 2026

Analyze CVE-2023-24932 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

Secure Boot Security Feature Bypass Vulnerability

Vendors: microsoft

Products: windows 10 1507, windows 10 1607, windows 10 1809, windows 10 20h2, windows 10 21h2, windows 10 22h2, windows 11 21h2, windows 11 22h2, windows server 2008, windows server 2012, windows server 2016, windows server 2019

Weakness: CWE-863

Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (10.6%)

In the news

14 stories

BlackX UEFI bootkit found on fully patched Windows PCs in Central Asia

Kaspersky says the Secure Boot revocation that would block Baton Drop stays off unless an admin enables KB5025885 by hand.

Hacker News · securityOct 26, 19:29 UTC · 4d agoMalwareExploitedHN 21 points · 0 commentsCVE-2022-21894 CVE-2023-249321

74

Patch Tuesday, January 2026 Edition

Krebs on SecurityJan 15, 00:00 UTC · Jan 15, 2026VulnerabilityExploitedCVE-2026-20805 CVE-2026-20952 CVE-2026-20953+61

60

Microsoft patches two actively exploited zero-days (CVE-2024-29988, CVE-2024-26234)

Help Net SecurityApr 9, 00:00 UTC · Apr 9, 2024Exploit / PoCExploitedCVE-2024-29988 CVE-2024-26234 CVE-2024-21412+93 · 2 reads

60

Microsoft's May Patch Tuesday Fixes 38 Flaws, Including 2 Exploited Zero

The Hacker NewsMay 15, 00:00 UTC · May 15, 2023VulnerabilityExploitedCVE-2023-29336 CVE-2023-29325 CVE-2023-24932+13 · 1 read

60

Week in review: Microsoft fixes two actively exploited bugs, MSI private code signing keys leaked

Help Net SecurityMay 14, 00:00 UTC · May 14, 2023RansomwareExploitedCVE-2023-29324 CVE-2023-29336 CVE-2023-249323 · 1 read

60

Threat Source newsletter (May 11, 2023) — So much for that ransomware decline

Cisco TalosMay 11, 18:00 UTC · May 11, 2023RansomwareExploitedCVE-2023-27350 CVE-2023-29336 CVE-2023-249322 · 1 read

60

Microsoft releases fix for patched Outlook issue exploited by Russian hackers

The RecordMay 10, 21:01 UTC · May 10, 2023VulnerabilityExploitedCVE-2023-23397 CVE-2023-29324 CVE-2023-29336+12 · 1 read

60

Microsoft Patches Three Zero

Infosecurity MagazineMay 10, 09:30 UTC · May 10, 2023VulnerabilityExploitedCVE-2023-29336 CVE-2023-24932 CVE-2023-293253 · 1 read

60

Microsoft Patch Tuesday, May 2023 Edition

Krebs on SecurityMay 10, 07:06 UTC · May 10, 2023VulnerabilityExploitedCVE-2023-29336 CVE-2023-24932 CVE-2023-24941+23

60

Microsoft Patch Tuesday for May 2023 fixed 2 zero

Security AffairsMay 10, 05:25 UTC · May 10, 2023VulnerabilityExploitedCVE-2023-29336 CVE-2023-24932 CVE-2023-24941+24 · 1 read

60

Microsoft fixes two actively exploited bugs, one used by BlackLotus bootkit (CVE-2023-29336, CVE-2023-24932)

Help Net SecurityMay 9, 00:00 UTC · May 9, 2023VulnerabilityExploitedCVE-2023-29336 CVE-2023-24932 CVE-2022-21882+105 · 1 read

60

China-Linked FishMonger Ports SprySOCKS to Windows With Kernel-Level Stealth and UEFI Bootkit Hints

Security AffairsJun 17, 08:10 UTC · Jun 17, 2026VulnerabilityCVE-2023-249322

47

China-Linked SprySOCKS Backdoor Expands to Windows with Driver

The Hacker NewsJun 15, 00:00 UTC · Jun 15, 2026MalwareCVE-2023-249322 · 2 reads

47

NSA Releases Guide to Combat Powerful BlackLotus Bootkit Targeting Windows Systems

The Hacker NewsJun 24, 15:03 UTC · Jun 24, 2023VulnerabilityCVE-2022-21894 CVE-2023-249322 · 1 read

35