AI description
CVE-2025-3052 is an arbitrary write vulnerability found in Microsoft signed UEFI firmware. It allows for the execution of untrusted software by enabling an attacker to control its value, leading to arbitrary memory writes, including modification of critical firmware settings stored in NVRAM. This vulnerability stems from improper handling of a runtime NVRAM variable, allowing an arbitrary write primitive. Successful exploitation could bypass Secure Boot, enabling attackers to run unsigned code during the boot process and potentially install bootkits, undermining OS-level security defenses and compromising the system's chain of trust. Microsoft has addressed this vulnerability by adding new hashes to the Secure Boot dbx as a mitigation measure.
- Description
- An arbitrary write vulnerability in Microsoft signed UEFI firmware allows for code execution of untrusted software. This allows an attacker to control its value, leading to arbitrary memory writes, including modification of critical firmware settings stored in NVRAM. Exploiting this vulnerability could enable security bypasses, persistence mechanisms, or full system compromise.
- Source
- cret@cert.org
- NVD status
- Awaiting Analysis
CVSS 3.1
- Type
- Secondary
- Base score
- 8.2
- Impact score
- 6
- Exploitability score
- 1.5
- Vector string
- CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
- Severity
- HIGH
- Hype score
- Not currently trending
Top 5 Trending CVEs: 1 - CVE-2025-33053 2 - CVE-2025-3052 3 - CVE-2025-49113 4 - CVE-2025-33073 5 - CVE-2025-25022 #cve #cvetrends #cveshield #cybersecurity https://t.co/4Fua3CAN6W
@CVEShield
16 Jun 2025
13 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
Mi Ubuntu me ha dicho que hay una actualización de firmware, concretamente de UEFI dbx (la lista de revocaciones de Secure Boot). Todo esto viene del CVE-2025-3052 (https://t.co/jylGTwjNT7) y sólo puedo dar las gracias por la rapidez en las actualizaciones de seguridad. https:
@diegolgz
15 Jun 2025
44 Impressions
0 Retweets
1 Like
0 Bookmarks
0 Replies
0 Quotes
Actively exploited CVE : CVE-2025-3052
@transilienceai
15 Jun 2025
21 Impressions
0 Retweets
0 Likes
0 Bookmarks
1 Reply
0 Quotes
Microsoft patched a major Secure Boot flaw impacting 14 modules, preventing hackers from installing bootkit malware. Update your Windows systems to protect against CVE-2025-3052 now! https://t.co/ubMYCFgYl0 https://t.co/c96pvMkSBp
@nano_fl0ra
14 Jun 2025
38 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
Actively exploited CVE : CVE-2025-3052
@transilienceai
14 Jun 2025
20 Impressions
0 Retweets
0 Likes
0 Bookmarks
1 Reply
0 Quotes
Actively exploited CVE : CVE-2025-3052
@transilienceai
13 Jun 2025
16 Impressions
0 Retweets
0 Likes
0 Bookmarks
1 Reply
0 Quotes
Actively exploited CVE : CVE-2025-3052
@transilienceai
12 Jun 2025
24 Impressions
0 Retweets
0 Likes
0 Bookmarks
1 Reply
0 Quotes
Critical Secure Boot Bypass (CVE-2025-3052) Exposes Millions of Modern PCs, PoC Video Released https://t.co/dOBW7S9a22
@the_yellow_fall
12 Jun 2025
330 Impressions
2 Retweets
6 Likes
1 Bookmark
0 Replies
0 Quotes
CVE-2025-3052（別名BRLY-2025-001）は、MicrosoftのUEFI証明書で署名されたBIOS更新ツールに存在するメモリ破損の脆弱性であり、Secure Bootを迂回してマルウェアを起動プロセスに常駐させる深刻な脅威である。 このモジ
@yousukezan
11 Jun 2025
2531 Impressions
2 Retweets
18 Likes
2 Bookmarks
1 Reply
0 Quotes
Security Alert: A serious flaw (CVE-2025-3052) in DTResearch’s UEFI firmware, found in rugged tablets and laptops, allows hackers to bypass Secure Boot. This lets them run harmful code before the operating system starts, potentially planting malware that security tools can’t
@tony3266
11 Jun 2025
96 Impressions
0 Retweets
3 Likes
0 Bookmarks
0 Replies
0 Quotes
研究人员发现两个漏洞能🔓绕过 Secure Boot，微软只修复了一个😢。CVE-2025-3052是DT Research设备固件工具漏洞🛠️，微软已屏蔽。另一个CVE-2025-47827涉Linux内核模块IGEL，微软未撤销签名💔。令人绝望😭。
@touhlih
11 Jun 2025
19 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
Die Sicherheitslücke CVE-2025-3052 führt die ganze Secure Boot/Kernel-Level-Anticheat endgültig ab absurdum. Programmiert lieber vernünftige Erkennung anstatt Spielern euren als Anticheat getarnten Trojaner auf den PC zu werfen! @EA @goldpriester #battlefield
@SigTwit
11 Jun 2025
31 Impressions
0 Retweets
0 Likes
0 Bookmarks
1 Reply
0 Quotes
🗞️ A new Secure Boot bypass flaw (CVE-2025-3052) allows attackers to disable security and install persistent bootkit malware on most Windows systems. Microsoft has patched the vulnerability in the June 2025 Patch Tuesday—update now to protect your devices! Key takeaways:
@gossy_84
11 Jun 2025
112 Impressions
0 Retweets
0 Likes
0 Bookmarks
1 Reply
0 Quotes
🚨 Nueva vulnerabilidad en Secure Boot (CVE-2025-3052) permite desactivar seguridad y ejecutar malware bootkit. Microsoft ya lanzó el parche, actualiza tu dispositivo hoy. #Ciberseguridad #SISAPNews https://t.co/VbJoXV5MTz
@SISAP_LATAM
11 Jun 2025
43 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
新しいSecure Bootの脆弱性発見 – ブートキットマルウェアのインストールが可能に、今すぐ対策を(CVE-2025-3052) https://t.co/VefNOLV0Fj #Security #セキュリティ #ニュース
@SecureShield_
11 Jun 2025
34 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
CVE-2025-3052 An arbitrary write vulnerability in Microsoft signed UEFI firmware allows for code execution of untrusted software. This allows an attacker to control its value, leadin… https://t.co/gRkeyRbQ6e
@CVEnew
10 Jun 2025
8 Impressions
0 Retweets
1 Like
0 Bookmarks
0 Replies
0 Quotes
CVE-2025-3052 is a Secure Boot bypass affecting systems trusting Microsoft's UEFI CA 2011 certificate, enabling bootkit malware installation. Microsoft mitigated it in June 2025. #Security https://t.co/padbgQQKpJ
@Strivehawk
10 Jun 2025
26 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
Critical Secure Boot vulnerability (CVE-2025-3052) allows attackers to install bootkit malware. Apply patches now to safeguard systems. [https://t.co/q8uaWxj9pc] #CyberSecurity
@threatlight
10 Jun 2025
13 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
A critical new Secure Boot flaw, tracked as CVE-2025-3052, has been unveiled, allowing attackers to disable security on devices and install bootkit malware. Stay informed and protect your systems by reading our detailed blog post. Find out more here: https://t.co/OdCCxFCxMn
@trubetech
10 Jun 2025
19 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
🚨Binarly is documenting the discovery of CVE-2025-3052, a memory-corruption flaw in a Microsoft-signed UEFI module that lets attackers bypass Secure Boot and run unsigned code before the OS starts. 🔗 Full details: https://t.co/bnojn8RmsV 🛡️ Advisory: https://t.co/0D3
@binarly_io
10 Jun 2025
11215 Impressions
40 Retweets
62 Likes
24 Bookmarks
1 Reply
4 Quotes
Two Secure Boot exploits found; Microsoft patches one (CVE-2025-3052) but allows the other to remain. https://t.co/9szrMcIpMX #technology #international #news
@HivewireAI
10 Jun 2025
11 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
Патч для CVE-2025-3052, обнаруженный @binarly_io также будет в июньских обновлениях.
@varwar1337
8 Jun 2025
36 Impressions
0 Retweets
0 Likes
0 Bookmarks
1 Reply
0 Quotes
⚠️ Repeated key management failures are undermining Intel Boot Guard & UEFI Secure Boot Leaked keys, debug certs & unpatched CVEs (CVE-2025-3052, CVE-2024-56161) leave millions vulnerable to bootkits & pre-OS malware Breaking news from the world &… https://t
@godeepweb
13 May 2025
46 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
CVE-2025-3052: Microsoft Signed UEFI Module PoC https://t.co/hPFXn66BcD https://t.co/aznVwotmX7
@freedomhack101
13 May 2025
55 Impressions
0 Retweets
1 Like
1 Bookmark
0 Replies
0 Quotes
🚨CVE-2025-3052 PoC: Microsoft Signed UEFI Module Credit: https://t.co/KjE9IUYujo https://t.co/6mxgyiXyw7
@DarkWebInformer
12 May 2025
5049 Impressions
4 Retweets
30 Likes
12 Bookmarks
0 Replies
0 Quotes