⬇ Download holy card: ·
Saint Hydroph0bia
Hagiography in preparation at the scriptorium.
Feast day June 12
Technical record
- Disclosed on
- June 12 2025
- CVE
- CVE-2025-4275
- CVSS
- 7.8
- Product
- Insyde Software · InsydeH2O
A vulnerability in the digital signature verification process does not properly validate variable attributes which allows an attacker to bypass signature verification by creating a non-authenticated NVRAM variable. An attacker may to execute arbitrary signed UEFI code and bypass Secure Boot.
Sources: coderush.me