PULSE
FEED
← All CVEs
CVE WatchJul 23, 2026

CVE-2026-8863

Multiple Microsoft-sigend UEFI SHIM bootloaders are vulnerable to SecureBoot bypass. An attacker with administrative privileges or the abili

CVSS

7.8

High

EPSS

0.1%

p1

KEV

—

Exploit Today

0

0-100

Published: Jun 9, 2026 · Last modified: Jul 23, 2026

EPSS · 30d
0.1%EPSS · 30 days0.1%
2026-10-042026-11-01
Technical description

Multiple Microsoft-sigend UEFI SHIM bootloaders are vulnerable to SecureBoot bypass. An attacker with administrative privileges or the ability to modify the boot process could use one of the vulnerable shim bootloaders to bypass Secure Boot protections and execute arbitrary code before the operating system loads. Specific UEFI DBX update is required to block these vulnerable boot loaders.

Official references
Related CVEs

No related CVEs by CWE or product.