Windows Update downgrade attack "unpatches" fully-updated systems

SafeBreach researcher Alon Leviev disclosed a novel "Windows Downdate" downgrade attack using two zero-day vulnerabilities (CVE-2024-38202, CVE-2024-21302) that can force fully patched Windows 10/11 and Server systems to revert critical components (DLLs, kernel, VBS/Hyper-V components) to older vulnerable versions, bypass UEFI locks and make systems susceptible to thousands of past vulnerabilities; Microsoft published advisories and is developing mitigations but reports no known exploitation in the wild.