CVE-2024-8105

A vulnerability exists in UEFI implementations that use a hard-coded software-based Platform Key PK. An attacker in possession of the corresponding PK private key can sign arbitrary UEFI executables or firmware components, causing them to be trusted by affected systems and potentially bypassing...