ESET detailed a flaw that could allow a bypass of the Secure Boot in UEFI systems

ESET disclosed CVE-2024-7344, a now-patched UEFI Secure Boot bypass in multiple third-party real-time recovery UEFI applications that used a custom PE loader, enabling unsigned UEFI binaries to be loaded from a crafted cloak.dat and allowing deployment of bootkits; vendors were notified, affected binaries revoked in Microsoft’s January 14, 2025 update, and a proof-of-concept was published.