Eurosoft (UK) Ltd: CVE-2022-34301 (bypass Secure Boot via UEFI Shell execution).CryptoPro Secure Disk: CVE-2022-34303 (bypass Secure Boot via UEFI Shell execution).New Horizon Datasys Inc: CVE-2022-34302 (bypass Secure Boot via custom installer).

Last week, security researchers from Eclypsium disclosed vulnerabilities in three signed third-party bootloaders that could be exploited to bypass the Secure Boot feature and infect the system with malicious code that is difficult to detect and remove. Bootloader issuesĮrror 0x800f0922 is related strictly to KB5012170, a security update for the Secure Boot DBX (Forbidden Signature Database), a repository that holds revoked signatures for Unified Extensible Firmware Interface (UEFI) bootloaders.Ī UEFI bootloader runs immediately after turning on the system and is responsible for launching the UEFI environment with the Secure Boot feature that allows only trusted code to be executed when starting the Windows booting process. The problem does not affect the cumulative security updates, monthly rollups, or security-only updates that Microsoft made available on August 9. Microsoft is warning that users may see a 0x800f0922 error when trying to install Windows KB5012170 Secure Boot security update on currently supported operating systems for consumers and the enterprise-class Server version.

Windows 0x800f0922