CVE-2026-21265 Secure Boot Certificate Expiration Security Feature Bypass Vulnerability

...

CVE-2026-21265

CVE-2026-21265 describes a Secure Boot bypass tied to expiration of Microsoft root certificates in the UEFI KEK/DB chain. Affected certificates include KEK CA 2011 (expires 2026-06-24), UEFI CA 2011 (expires 2026-06-27), and Windows Production PCA 2011 (expires 2026-10-19). The vulnerability aris...

CVE-2026-21265 Secure Boot Certificate Expiration Security Feature Bypass Vulnerability

...

January 13, 2026—KB5073697 (Monthly Rollup)

None None...

January 13, 2026—KB5073696 (Monthly Rollup)

None None...

January 13, 2026—KB5073700 (Security-only update)

None None...

January 13, 2026—KB5073699 (Security-only update)

None None...

January 13, 2026—KB5073698 (Monthly Rollup)

None None...

January 13, 2026—KB5073695 (Monthly Rollup)

None None...

January 13, 2026—KB5073723 (OS Build 17763.8276)

None None...

January 13, 2026—KB5073722 (OS Build 14393.8783)

None None...

January 13, 2026—KB5073457 (OS Build 20348.4648)

None None...

January 13, 2026—KB5073455 (OS Build 22631.6491)

None None...

January 13, 2026—KB5073450 (OS Build 25398.2092)

None None...

January 13, 2026—KB5073724 (OS Builds 19045.6809 and 19044.6809)

None None...

Secure Boot Certificate Expiration Security Feature Bypass Vulnerability

Windows Secure Boot stores Microsoft certificates in the UEFI KEK and DB. These original certificates are approaching expiration, and devices containing affected certificate versions must update them to maintain Secure Boot functionality and avoid compromising security by losing security fixes...

CVE-2026-21265: Reliance on Component That is Not Updateable

Windows Secure Boot stores Microsoft certificates in the UEFI KEK and DB. These original certificates are approaching expiration, and devices containing affected certificate versions must update them to maintain Secure Boot functionality and avoid compromising security by losing security fixes...

PT-2026-2658

Name of the Vulnerable Software and Affected Versions Microsoft Windows versions prior to February 2026 Patch Tuesday updates Description A vulnerability exists in the Desktop Window Manager component of Microsoft Windows that can lead to the disclosure of sensitive information to an unauthorized...

PT-2026-2766

Name of the Vulnerable Software and Affected Versions Windows versions affected versions not specified Windows Server versions affected versions not specified Description The issue centers around the approaching expiration of Microsoft certificates used in Windows Secure Boot, specifically those...

Microsoft Windows Secure Boot 安全漏洞

Microsoft Windows Secure Boot is a secure boot from Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows Secure Boot. An attacker exploiting this vulnerability could bypass certain features. The following products and editions are affected:Windows 10 Version 1809 for...