EUVD-2026-81014

An issue in Howyar Technologies Inc SysReturn Versions prior to 11.3.034 and fixed in v.11.3.0.34 allows a local attcker to execute arbitrary code via the BOOTia32.efi and a crafted cloak32.dat file on the ESP...

CVE-2026-79298

Howyar Technologies SysReturn (NetCopy feature) prior to v11.3.034 ships a vulnerable IA-32 UEFI boot path (BOOTia32.efi) that still carries the custom RxPE PE loader from the original CVE-2024-7344, loading unsigned payloads from cloak32.dat and bypassing Secure Boot verification. The x64 path w...

UEFI-Security-Research-Howyar-SysReturn-NetCopy

🌊 UEFI Security Research - Howyar SysReturn NetCopy Under the cloak of Secure Boot, some architectures sink deeper than the vulnerabilities that exposed them. Some binaries are revoked. Some patches are shipped. But deep below the surface, old habits leave traces. This is what remains when a...