CVE/CVE-2025-3052 - Revision history

Kenneth at 08:32, 15 November 2025

2025-11-15T08:32:04Z

← Older revision		Revision as of 08:32, 15 November 2025
Line 16:		Line 16:
	== NIST - NVD - CVE-2025-3052 ==		== NIST - NVD - CVE-2025-3052 ==
	https://nvd.nist.gov/vuln/detail/CVE-2025-3052		https://nvd.nist.gov/vuln/detail/CVE-2025-3052

	~~== Check-UEFISecureBootVariables ==~~

	~~cjee21/Check-UEFISecureBootVariables: PowerShell scripts to check the UEFI KEK, DB and DBX Secure Boot variables.~~
	~~https://github.com/cjee21/Check-UEFISecureBootVariables~~

	~~Get-SecureBootUEFI~~
	~~https://learn.microsoft.com/en-us/powershell/module/secureboot/get-securebootuefi?view=windowsserver2025-ps~~

	== Quick Windows Patch Check ==		== Quick Windows Patch Check ==
Line 29:		Line 21:
	Get-HotFix \| Where-Object {$_.HotFixID -match "KB5060*"}		Get-HotFix \| Where-Object {$_.HotFixID -match "KB5060*"}

	=== Windows 10 LTSC Sample ===		=== Windows 10 LTSC Sample Patch Check ===
	<pre>		<pre>
	PS C:\> Get-HotFix \| Where-Object {$_.HotFixID -match "KB5060*"}		PS C:\> Get-HotFix \| Where-Object {$_.HotFixID -match "KB5060*"}
Line 39:		Line 31:
	</pre>		</pre>

	=== Windows 11 Sample ===		=== Windows 11 Sample Patch Check ===

	<pre>		<pre>
Line 50:		Line 42:
	MYWIN11 Update KB5067035 NT AUTHORITY\SYSTEM 10/29/2025 12:00:00 AM		MYWIN11 Update KB5067035 NT AUTHORITY\SYSTEM 10/29/2025 12:00:00 AM
	</pre>		</pre>

			== Check-UEFISecureBootVariables ==

			cjee21/Check-UEFISecureBootVariables: PowerShell scripts to check the UEFI KEK, DB and DBX Secure Boot variables.
			https://github.com/cjee21/Check-UEFISecureBootVariables

			Get-SecureBootUEFI
			https://learn.microsoft.com/en-us/powershell/module/secureboot/get-securebootuefi?view=windowsserver2025-ps

	== keywords ==		== keywords ==

Kenneth: /* CVE-2025-3052 – UEFI Secure Boot Bypass Vulnerability */

2025-11-15T08:30:19Z

CVE-2025-3052 – UEFI Secure Boot Bypass Vulnerability

@@ Line 3: / Line 3: @@
   What is CVE-2025-3052?
   CVE-2025-3052 is an arbitrary write vulnerability in UEFI firmware applications signed by Microsoft (e.g., DTBios, BiosFlashShell).  It allows attackers to manipulate NVRAM variables and bypass Secure Boot, enabling execution of unauthorized code during system startup.
 ==  NIST - NVD - CVE-2025-3052 ==

Kenneth: /* CVE-2025-3052 – UEFI Secure Boot Bypass Vulnerability */

2025-11-15T08:28:37Z

CVE-2025-3052 – UEFI Secure Boot Bypass Vulnerability

← Older revision		Revision as of 08:28, 15 November 2025
Line 3:		Line 3:
	What is CVE-2025-3052?		What is CVE-2025-3052?
	CVE-2025-3052 is an arbitrary write vulnerability in UEFI firmware applications signed by Microsoft (e.g., DTBios, BiosFlashShell). It allows attackers to manipulate NVRAM variables and bypass Secure Boot, enabling execution of unauthorized code during system startup.		CVE-2025-3052 is an arbitrary write vulnerability in UEFI firmware applications signed by Microsoft (e.g., DTBios, BiosFlashShell). It allows attackers to manipulate NVRAM variables and bypass Secure Boot, enabling execution of unauthorized code during system startup.

			== NIST - NVD - CVE-2025-3052 ==
			https://nvd.nist.gov/vuln/detail/CVE-2025-3052

	== Check-UEFISecureBootVariables ==		== Check-UEFISecureBootVariables ==

Kenneth: /* Windows 11 Sample */

2025-11-15T08:26:07Z

Windows 11 Sample

← Older revision		Revision as of 08:26, 15 November 2025
Line 29:		Line 29:

	<pre>		<pre>
	PS C:\~~Users\24964~~> Get-HotFix \| Where-Object {$_.HotFixID -match "KB5060*"}		PS C:\> Get-HotFix \| Where-Object {$_.HotFixID -match "KB5060*"}

	Source Description HotFixID InstalledBy InstalledOn		Source Description HotFixID InstalledBy InstalledOn

Kenneth: /* Quick Windows Patch Check */

2025-11-15T08:21:02Z

Quick Windows Patch Check

← Older revision		Revision as of 08:21, 15 November 2025
Line 16:		Line 16:
	Get-HotFix \| Where-Object {$_.HotFixID -match "KB5060*"}		Get-HotFix \| Where-Object {$_.HotFixID -match "KB5060*"}

	Windows 10 LTSC:		=== Windows 10 LTSC Sample ===
	<pre>		<pre>
	PS C:\> Get-HotFix \| Where-Object {$_.HotFixID -match "KB5060*"}		PS C:\> Get-HotFix \| Where-Object {$_.HotFixID -match "KB5060*"}
Line 22:		Line 22:
	Source Description HotFixID InstalledBy InstalledOn		Source Description HotFixID InstalledBy InstalledOn
	------ ----------- -------- ----------- -----------		------ ----------- -------- ----------- -----------
	~~MYSYSTEM1-...~~ Security Update KB5065429 NT AUTHORITY\SYSTEM 11/15/2025 12:00:00 AM		MYWIN10 Security Update KB5065429 NT AUTHORITY\SYSTEM 11/15/2025 12:00:00 AM
	~~MYSYSTEM1-...~~ Update KB5063979 NT AUTHORITY\SYSTEM 9/26/2025 12:00:00 AM		MYWIN10 Update KB5063979 NT AUTHORITY\SYSTEM 9/26/2025 12:00:00 AM
			</pre>

			=== Windows 11 Sample ===

			<pre>
			PS C:\Users\24964> Get-HotFix \| Where-Object {$_.HotFixID -match "KB5060*"}

			Source Description HotFixID InstalledBy InstalledOn
			------ ----------- -------- ----------- -----------
			MYWIN11 Update KB5067931 NT AUTHORITY\SYSTEM 10/29/2025 12:00:00 AM
			MYWIN11 Security Update KB5068861 NT AUTHORITY\SYSTEM 11/13/2025 12:00:00 AM
			MYWIN11 Update KB5067035 NT AUTHORITY\SYSTEM 10/29/2025 12:00:00 AM
	</pre>		</pre>

	== keywords ==		== keywords ==

Kenneth: /* Quick Windows Patch Check */

2025-11-15T08:17:59Z

Quick Windows Patch Check

← Older revision		Revision as of 08:17, 15 November 2025
Line 15:		Line 15:

	Get-HotFix \| Where-Object {$_.HotFixID -match "KB5060*"}		Get-HotFix \| Where-Object {$_.HotFixID -match "KB5060*"}

			Windows 10 LTSC:
			<pre>
			PS C:\> Get-HotFix \| Where-Object {$_.HotFixID -match "KB5060*"}

			Source Description HotFixID InstalledBy InstalledOn
			------ ----------- -------- ----------- -----------
			MYSYSTEM1-... Security Update KB5065429 NT AUTHORITY\SYSTEM 11/15/2025 12:00:00 AM
			MYSYSTEM1-... Update KB5063979 NT AUTHORITY\SYSTEM 9/26/2025 12:00:00 AM
			</pre>

	== keywords ==		== keywords ==

Kenneth at 08:16, 15 November 2025

2025-11-15T08:16:29Z

← Older revision		Revision as of 08:16, 15 November 2025
Line 11:		Line 11:
	Get-SecureBootUEFI		Get-SecureBootUEFI
	https://learn.microsoft.com/en-us/powershell/module/secureboot/get-securebootuefi?view=windowsserver2025-ps		https://learn.microsoft.com/en-us/powershell/module/secureboot/get-securebootuefi?view=windowsserver2025-ps

			== Quick Windows Patch Check ==

			Get-HotFix \| Where-Object {$_.HotFixID -match "KB5060*"}

	== keywords ==		== keywords ==

Kenneth at 00:33, 14 November 2025

2025-11-14T00:33:41Z

@@ Line 1: / Line 1: @@
   cjee21/Check-UEFISecureBootVariables: PowerShell scripts to check the UEFI KEK, DB and DBX Secure Boot variables.
   https://github.com/cjee21/Check-UEFISecureBootVariables
@@ Line 4: / Line 11: @@
   Get-SecureBootUEFI
   https://learn.microsoft.com/en-us/powershell/module/secureboot/get-securebootuefi?view=windowsserver2025-ps

Kenneth: Created page with " cjee21/Check-UEFISecureBootVariables: PowerShell scripts to check the UEFI KEK, DB and DBX Secure Boot variables. https://github.com/cjee21/Check-UEFISecureBootVariables Get-SecureBootUEFI https://learn.microsoft.com/en-us/powershell/module/secureboot/get-securebootuefi?view=windowsserver2025-ps"

2025-11-14T00:32:56Z

Created page with " cjee21/Check-UEFISecureBootVariables: PowerShell scripts to check the UEFI KEK, DB and DBX Secure Boot variables. https://github.com/cjee21/Check-UEFISecureBootVariables Get-SecureBootUEFI https://learn.microsoft.com/en-us/powershell/module/secureboot/get-securebootuefi?view=windowsserver2025-ps"

New page

cjee21/Check-UEFISecureBootVariables: PowerShell scripts to check the UEFI KEK, DB and DBX Secure Boot variables.
https://github.com/cjee21/Check-UEFISecureBootVariables

Get-SecureBootUEFI
https://learn.microsoft.com/en-us/powershell/module/secureboot/get-securebootuefi?view=windowsserver2025-ps