CVE-2023-24932

KB5025885: How to manage the Windows Boot Manager revocations for Secure Boot changes associated with CVE-2023-24932

Overview of CVE-2023-24932

CVE-2023-24932 is associated with the BlackLotus UEFI bootkit, which undermines Secure Boot by executing code at the UEFI level, posing persistent security risks. Updating Windows Boot Manager and Secure Boot configurations is vital for protection.

All Windows devices with Secure Boot protections enabled are affected by the BlackLotus bootkit.