CVE-2022-21894

Vendor

Microsoft, Kaspersky

Product

Windows, GRUB / Secure Boot, Kaspersky

Exposure class

Operating system, Endpoint security

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 19
   Research Binarly 22 Mar 2023

   Scalable Vulnerability Analysis Requires Automation

   Discover why scalable vulnerability analysis demands automation. Learn about critical firmware-specific vulnerabilities, like BatonDrop (CVE-2022-21894), affecting Microsoft Windows bootloaders.

   CVE-2022-21894 Microsoft
2. 15
   Research Securelist 10d ago

   How APT41 revived the BlackLotus bootkit to attack diplomatic organizations in Central Asia

   Kaspersky GReAT experts discovered a new UEFI bootkit, BlackX. It exploits the Baton Drop vulnerability (CVE-2022-21894) and is similar to the BlackLotus bootkit.

   CVE-2022-21894 Kaspersky