CVE-2026-41097 Secure Boot Security Feature Bypass Vulnerability

...

May 12, 2026—KB5087420 (OS Build 22631.7079)

None None...

May 12, 2026—KB5087544 (OS Builds 19045.7291 and 19044.7291)

None None...

May 12, 2026—KB5087538 (OS Build 17763.8755)

None None...

May 12, 2026—KB5087545 (OS Build 20348.5139)

None None...

March 10, 2026—Hotpatch KB5078737 (OS Build 20348.4830)

None None...

May 12, 2026—Hotpatch KB5087424 (OS Build 20348.5074)

None None...

May 12, 2026—KB5087541 (OS Build 25398.2330)

None None...

May 12, 2026—KB5087471 (Monthly Rollup)

None None...

May 12, 2026—KB5087470 (Monthly Rollup)

None None...

May 12, 2026—KB5087537 (OS Build 14393.9140)

None None...

Secure Boot Security Feature Bypass Vulnerability

Reliance on a component that is not updateable in Windows Secure Boot allows an authorized attacker to bypass a security feature locally...

KB5088064: Servicing stack update for Windows 10, version 1607 and Windows Server 2016: May 12, 2026

None None...

PT-2026-40238

Reliance on a component that is not updateable in Windows Secure Boot allows an authorized attacker to bypass a security feature locally...

Microsoft Windows Secure Boot 安全漏洞

Microsoft Windows Secure Boot is a security boot feature provided by Microsoft Corporation. There are security vulnerabilities associated with Microsoft Windows Secure Boot. Attackers can exploit these vulnerabilities to bypass certain features. The following products and versions are affected:...

CVE-2026-41097: Reliance on Component That is Not Updateable

Reliance on a component that is not updateable in Windows Secure Boot allows an authorized attacker to bypass a security feature locally...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: grub2 (UTSA-2026-017485)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-017485 advisory. A flaw was found in grub2 in versions prior to 2.06, where it incorrectly enables the usage of the ACPI command when Secure Boot is enabled. This flaw allows an...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: grub2 (UTSA-2026-017477)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-017477 advisory. A flaw was found in grub2 in versions prior to 2.06. During USB device initialization, descriptors are read with very little bounds checking and assumes the USB devi...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: grub2 (UTSA-2026-017479)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-017479 advisory. A flaw was found in grub2 in versions prior to 2.06. The rmmod implementation allows the unloading of a module used as a dependency without checking if any other...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: grub2 (UTSA-2026-017478)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-017478 advisory. A flaw was found in grub2 in versions prior to 2.06. Variable names present are expanded in the supplied command line into their corresponding variable contents, usi...