Microsoft Uncovers Several Vulnerabilities in GRUB2, U-Boot, Barebox Bootloaders Using Copilot

Microsoft researchers using AI-assisted code review identified multiple critical vulnerabilities in open-source bootloaders (GRUB2, U-Boot, Barebox) that can enable attackers to execute code at boot time, bypass secure boot, and achieve persistent, pre-OS compromise across thousands of Linux and embedded systems; the report lists numerous CVEs, demonstrates a parsing/buffer-overflow issue in GRUB2, and urges immediate patching and administrative/physical mitigations.