CVE-2024-26180: 
vulnerability analysis and mitigation

A Secure Boot Security Feature Bypass Vulnerability, identified as CVE-2024-26180, was discovered affecting various Microsoft Windows operating systems. The vulnerability was initially reported on April 9, 2024, and received a CVSS v3.1 base score of 8.0 (HIGH) (Microsoft Advisory).

The vulnerability is classified as a Stack-based Buffer Overflow (CWE-121) with a CVSS vector of CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H. This indicates that the vulnerability requires adjacent network access, has low attack complexity, requires no privileges, needs user interaction, and can result in high impacts to confidentiality, integrity, and availability (NVD).

The vulnerability affects multiple versions of Microsoft Windows, including Windows 10 (versions 1507, 1607, 1809, 21H2, 22H2), Windows 11 (versions 21H2, 22H2, 23H2), Windows Server 2012, Windows Server 2012 R2, Windows Server 2016, Windows Server 2019, and Windows Server 2022. If exploited, it could lead to a security feature bypass in Secure Boot (NVD).

Microsoft has released security updates to address this vulnerability across affected systems. The fixes are available through various KB articles including KB5036925 (Windows 10 1507), KB5036899 (Windows 10 1607), KB5036896 (Windows 10 1809), KB5036892 (Windows 10 21H2/22H2), KB5036893 (Windows 11 22H2/23H2), and multiple other patches for server versions (Rapid7).