Microsoft Secure Boot Vulnerability Exists Since 2014 Due to Unrevoked Shims
Overview
A significant security vulnerability has been identified in Microsoft Windows Secure Boot that has existed for approximately a decade. The issue stems from old "shim" loaders that Microsoft failed to properly revoke, allowing the security feature to be bypassed.
What Happened
Secure Boot is a security standard designed to ensure that a device boots using only software that is trusted by the Original Equipment Manufacturer (OEM). When a device starts up, the firmware checks the signature of all boot software, including UEFI drivers and the operating system.
The vulnerability allowed bypasses through forgotten shim loaders that Microsoft never properly revoked from the system. These shims were originally created to allow Linux dual-booting on Windows systems, but remained exploitable long after they should have been disabled.
Security Implications
This flaw means that for roughly ten years, an attacker with administrator or root access could have potentially:
- Installed persistent bootkits that survive OS reinstalls
- Bypassed Windows security features entirely
- Maintained long-term access to affected systems
Remediation
Microsoft has been notified of the vulnerability. Organizations and users should monitor for official guidance and security updates from Microsoft regarding this issue.