Downgrade attacks open patched systems to malware

Research by Alon Leviev demonstrates that Windows downgrade attacks can revert patched components (DLLs, drivers, kernel) to vulnerable versions, allowing unsigned kernel drivers and privilege escalation; while Microsoft patched specific CVEs (CVE-2024-21302 and CVE-2024-38202), the report warns of structural detection gaps and broader risks across platforms.