Eleven Old Microsoft-Signed UEFI Shims Bypass Secure Boot
ESET researchers discovered that eleven older versions of Microsoft-signed UEFI boot shims (versions 0.9 and below) can bypass Secure Boot protections, with Microsoft revoking certificates for these specific shims.
ESET researchers have uncovered a significant vulnerability affecting UEFI Secure Boot, a critical security feature designed to protect the boot process of computers. Eleven older versions of Microsoft-signed UEFI boot shims, specifically versions 0.9 and below, have been found capable of bypassing these protections. These shims are intended to allow third-party bootloaders, such as those used by Linux distributions, to run securely on systems with Secure Boot enabled. However, due to their age and the vulnerabilities they contain, these specific shims undermine the very security they are meant to uphold.
Microsoft has acknowledged the issue and, in its June 9, 2026 Patch Tuesday update, revoked the digital certificates associated with these vulnerable shims. This action prevents the shims from being trusted by systems that actively check for revoked certificates. The affected shims are trusted by any UEFI system carrying Microsoft’s third-party certificate, the Microsoft Corporation UEFI CA 2011, and their behavior is independent of the operating system installed. The danger lies in the fact that an attacker can copy one of these old shims onto a target machine, along with a matching second-stage loader, and the boot chain will accept it, effectively bypassing Secure Boot.
The vulnerability stems from the way these shims function. A shim acts as a minimal loader that Microsoft vets and signs once. It then vouches for the next stage in the boot process, typically a bootloader like GRUB 2, using a vendor certificate embedded within it. GRUB 2, in turn, verifies the operating system's kernel against that same certificate. The problem arises when the second-stage loaders themselves contain known vulnerabilities, especially in older versions of components like GRUB 2.
For instance, one reported Oracle Linux shim trusts a GRUB 2 binary from an older Oracle Linux 7.1 installation media that is vulnerable to CVE-2015-5281. This flaw allows local users to bypass Secure Boot restrictions and execute non-verified code via a crafted multiboot or multiboot2 module. An attacker could easily exploit this by creating an unsigned multiboot2 kernel image, placing it on the EFI System Partition alongside the old shim and GRUB 2, and then loading it with a single command during boot.
Furthermore, these older shims lack crucial security features that have been added to the shim project in later versions. Features like MOK (Machine Owner Key) denylist enforcement, which allows a system to reject a revoked key, were introduced after version 0.9. Similarly, support for Secure Boot Advanced Targeting (SBAT), which enhances revocation management, arrived much later. Shims built before these features were implemented will ignore matching revocations, allowing attackers to potentially swap a patched shim for an older, vulnerable Microsoft-signed one, thereby loading binaries that current security policies would otherwise block.
A separate, related flaw, now tracked as CVE-2026-10797, was fixed upstream nearly a decade ago but never received a CVE ID until this report. The old signed shims carrying this flaw were never revoked. This vulnerability exploits how signed PE binaries record their signature length in two locations. The affected shims read one location for revocation checks and another for signature verification. By tampering with the WIN_CERTIFICATE structure of a second-stage loader, an attacker can trick the revocation check into using the wrong bytes, allowing a certificate that should have been revoked to slip through. This bypass specifically affects certificate-based revocations where the second-stage loader is signed by a certificate embedded in the shim; hash-based revocations remain effective.
While the Microsoft UEFI CA 2011 certificate itself expired on June 27, 2026, this expiration does not affect Secure Boot verification for bootloaders signed with it prior to expiration. Such bootloaders remain trusted as long as the certificate is present in the system's trusted database (db) and its hash is not listed in the revoked database (dbx). Microsoft continued signing submissions with this certificate until its expiration date.
To mitigate these risks, users must ensure that the latest UEFI revocations are applied. Windows machines typically receive dbx updates automatically, but ESET has provided PowerShell commands for elevated users to check for the presence of the eleven revoked hashes. Linux systems can obtain the update via the Linux Vendor Firmware Service and verify the result using the uefi-dbx-audit script. Windows 11 Secured-core PCs should have third-party signing disabled by default. The shim-review repository documents shims submitted for signing since 2017, but no comprehensive record exists for earlier submissions, making it impossible to determine the exact number of vulnerable shims still in circulation. Revoking these eleven shims is a crucial step, and implementing version-based revocation mechanisms like SBAT will aid future cleanup efforts.
This new report details how attackers could exploit these vulnerable UEFI shims to deploy persistent UEFI bootkits like Bootkitty, HybridPetya, or BlackLotus, even when Secure Boot is enabled. The attack leverages the Bring Your Own Vulnerable Driver (BYOVD) technique to execute arbitrary code before the operating system loads, bypassing security controls and EDR solutions.
The new article provides further technical details on the exploitation of these old UEFI shim bootloaders, highlighting how attackers can leverage CVE-2026-8863 and CVE-2026-10797 to deploy UEFI bootkits like Bootkitty or BlackLotus. It also clarifies that the vulnerability is not limited to specific Linux distributions but affects any UEFI system trusting Microsoft's third-party signing certificate, as the vulnerable shims lack modern revocation checks like SBAT and MokListX.
The ESET research details that the vulnerable UEFI shim bootloaders, some dating back a decade, were part of various software packages including PC-diagnostics tools and Linux distributions. Exploitation is not limited to systems with the affected software installed, as attackers can introduce their own copies of the vulnerable binaries to any UEFI system trusting Microsoft's third-party CA certificate. Microsoft has since revoked the Authenticode hashes for the 11 identified vulnerable UEFI applications as part of its June 9th, 2026 Patch Tuesday update.
The article provides further technical details on how these vulnerable UEFI shims can be exploited, specifically demonstrating an attack chain using the Oracle Linux shim. It highlights that the exploit requires no memory corruption or reverse engineering, merely the ability to place a crafted unsigned kernel image alongside the vulnerable shim and an older GRUB 2 binary. Additionally, it clarifies that the older shims bypass newer defenses like MOK denylist enforcement and SBAT policy checks because they predate these security mechanisms.
This new report from Dark Reading elaborates on the implications of the discovered UEFI shim bootloader vulnerabilities, highlighting the challenge of managing trust in legacy components within Secure Boot implementations. It emphasizes that the danger lies not in novel exploits, but in the continued trust of outdated, unrevoked binaries, which can be leveraged by attackers with a basic understanding of UEFI. The article also points out that while Microsoft has revoked certificates for these specific shims, the broader issue of 'Secure Boot debt' due to slow inventory and revocation processes may leave many systems exposed for extended periods, particularly in enterprise environments with long patching cycles.
The SecurityWeek article provides additional context on the UEFI shim vulnerability, noting that the affected shims primarily stem from version 0.9 and earlier. It also highlights that these vulnerable shims were signed and trusted until Microsoft revoked their certificates on June 2026 Patch Tuesday, with two specific CVEs, CVE-2026-8863 and CVE-2026-10797, being assigned to the issue.