{"metadata": {"vulnerability": "cve-2025-3052", "count": 73, "kinds": {"milestone": 8, "sighting": 38, "kev": 5, "other": 22}}, "data": [{"timestamp": "2025-03-31T16:26:00.858Z", "date_only": false, "value": "2025-03-31T16:26:00.858Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2025-3052", "field": "cveMetadata.dateReserved"}, {"timestamp": "2025-05-12T19:49:32Z", "date_only": false, "value": "2025-05-12T19:49:32.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/TheDarkWebInformer/17179", "record": "CVE-2025-3052", "field": "creation_timestamp", "uuid": "e337ec5b-bcdf-41fa-8e50-94d01beedc64", "content": "\ud83d\udea8CVE-2025-3052 PoC: Microsoft Signed UEFI Module\n\nCredit: https://www.binarly.io/blog/repeatable-supply-chain-security-failures-in-firmware-key-management", "url": "https://t.me/TheDarkWebInformer/17179"}, {"timestamp": "2025-06-05T14:45:00Z", "date_only": false, "value": "2025-06-05T14:45:00Z", "kind": "other", "label": "Document generated", "source": "csaf_ncscnl \u00b7 NCSC-2025-0188", "record": "NCSC-2025-0188", "field": "document.tracking.generator.date"}, {"timestamp": "2025-06-10T00:00:00Z", "date_only": true, "value": "2025-06-10", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0499", "record": "CERTFR-2025-AVI-0499", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2025-06-10T15:24:53Z", "date_only": false, "value": "2025-06-10T15:24:53.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.thezdi.com/blog/2025/6/10/the-june-2025-security-update-review", "record": "CVE-2025-3052", "field": "creation_timestamp", "uuid": "f949689f-9fb8-4a6e-b7fc-dd6b4c883d67", "url": "https://www.thezdi.com/blog/2025/6/10/the-june-2025-security-update-review"}, {"timestamp": "2025-06-10T18:43:18.187Z", "date_only": false, "value": "2025-06-10T18:43:18.187461Z", "kind": "other", "label": "Advisory revision", "source": "csaf_ncscnl \u00b7 NCSC-2025-0188", "record": "NCSC-2025-0188", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2025-06-10T18:43:18.187Z", "date_only": false, "value": "2025-06-10T18:43:18.187461Z", "kind": "milestone", "label": "Published", "source": "csaf_ncscnl \u00b7 NCSC-2025-0188", "record": "NCSC-2025-0188", "field": "document.tracking.initial_release_date"}, {"timestamp": "2025-06-10T18:43:18.187Z", "date_only": false, "value": "2025-06-10T18:43:18.187461Z", "kind": "other", "label": "Updated", "source": "csaf_ncscnl \u00b7 NCSC-2025-0188", "record": "NCSC-2025-0188", "field": "document.tracking.current_release_date"}, {"timestamp": "2025-06-10T19:06:54.331Z", "date_only": false, "value": "2025-06-10T19:06:54.331058Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/waveformnews.bsky.social/post/3lrbln5lqnk2q", "record": "CVE-2025-3052", "field": "creation_timestamp", "uuid": "886b6b1b-ae11-42cf-958f-65b6e7966b64", "url": "https://bsky.app/profile/waveformnews.bsky.social/post/3lrbln5lqnk2q"}, {"timestamp": "2025-06-10T19:19:54.775Z", "date_only": false, "value": "2025-06-10T19:19:54.775Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2025-3052", "field": "cveMetadata.datePublished"}, {"timestamp": "2025-06-10T19:19:54.775Z", "date_only": false, "value": "2025-06-10T19:19:54.775Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / certcc", "record": "cve-2025-3052", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2025-06-10T19:31:01Z", "date_only": false, "value": "2025-06-10T19:31:01.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/17966", "record": "CVE-2025-3052", "field": "creation_timestamp", "uuid": "d535ccdd-b0de-47bc-8510-5990c7369836", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-3052\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: An arbitrary write vulnerability in Microsoft signed UEFI firmware allows for code execution of untrusted software. This allows an attacker to control its value, leading to arbitrary memory writes, including modification of critical firmware settings stored in NVRAM. Exploiting this vulnerability could enable security bypasses, persistence mechanisms, or full system compromise.\n\ud83d\udccf Published: 2025-06-10T19:19:54.775Z\n\ud83d\udccf Modified: 2025-06-10T19:19:54.775Z\n\ud83d\udd17 References:\n1. https://uefi.org/specs/UEFI/2.10/32_Secure_Boot_and_Driver_Signing.html\n2. https://www.binarly.io/advisories/brly-dva-2025-001", "url": "https://t.me/DarkWebInformer_CVEAlerts/17966"}, {"timestamp": "2025-06-10T19:51:42.494Z", "date_only": false, "value": "2025-06-10T19:51:42.494987Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2025-3052", "field": "containers.adp.0.metrics.1.other.content.timestamp"}, {"timestamp": "2025-06-10T19:51:42.494Z", "date_only": false, "value": "2025-06-10T19:51:42.494987Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-3052", "record": "FKIE_CVE-2025-3052", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-06-10T19:53:46.010Z", "date_only": false, "value": "2025-06-10T19:53:46.010Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2025-3052", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-06-10T20:02:40.464Z", "date_only": false, "value": "2025-06-10T20:02:40.464415Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/bleepingcomputer.com/post/3lrboqvix4724", "record": "CVE-2025-3052", "field": "creation_timestamp", "uuid": "d5c91eb6-97c3-405f-bb7b-04beda85e533", "url": "https://bsky.app/profile/bleepingcomputer.com/post/3lrboqvix4724"}, {"timestamp": "2025-06-10T20:06:25.013Z", "date_only": false, "value": "2025-06-10T20:06:25.013706Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/ahmetbutun.bsky.social/post/3lrboxl4hat25", "record": "CVE-2025-3052", "field": "creation_timestamp", "uuid": "f996b756-0945-4b14-8bd9-ff5f56e7bd9a", "url": "https://bsky.app/profile/ahmetbutun.bsky.social/post/3lrboxl4hat25"}, {"timestamp": "2025-06-10T20:15:23Z", "date_only": false, "value": "2025-06-10T20:15:23Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-Q4RV-V64C-3HFF", "record": "GHSA-Q4RV-V64C-3HFF", "field": "database_specific.nvd_published_at"}, {"timestamp": "2025-06-10T20:15:23.037Z", "date_only": false, "value": "2025-06-10T20:15:23.037", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-3052", "record": "FKIE_CVE-2025-3052", "field": "published"}, {"timestamp": "2025-06-10T20:19:55.440Z", "date_only": false, "value": "2025-06-10T20:19:55.440712Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/redteamnews.bsky.social/post/3lrbppq2mt62h", "record": "CVE-2025-3052", "field": "creation_timestamp", "uuid": "0c0e3a16-5c6c-42b6-8199-fadc7dcd47df", "url": "https://bsky.app/profile/redteamnews.bsky.social/post/3lrbppq2mt62h"}, {"timestamp": "2025-06-10T20:57:47.185Z", "date_only": false, "value": "2025-06-10T20:57:47.185837Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/technotenshi.bsky.social/post/3lrbrsvsha22i", "record": "CVE-2025-3052", "field": "creation_timestamp", "uuid": "fad0c840-3d74-4934-95e0-b0134873d971", "url": "https://bsky.app/profile/technotenshi.bsky.social/post/3lrbrsvsha22i"}, {"timestamp": "2025-06-10T21:03:04.250Z", "date_only": false, "value": "2025-06-10T21:03:04.250Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2025-3052", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-06-10T21:03:04.250Z", "date_only": false, "value": "2025-06-10T21:03:04.250Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "cve-2025-3052", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2025-06-10T21:31:23Z", "date_only": false, "value": "2025-06-10T21:31:23Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-Q4RV-V64C-3HFF", "record": "GHSA-Q4RV-V64C-3HFF", "field": "published"}, {"timestamp": "2025-06-10T21:31:23Z", "date_only": false, "value": "2025-06-10T21:31:23Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-Q4RV-V64C-3HFF", "record": "GHSA-Q4RV-V64C-3HFF", "field": "modified"}, {"timestamp": "2025-06-10T22:00:00Z", "date_only": false, "value": "2025-06-10T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-1277", "record": "WID-SEC-W-2025-1277", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2025-06-10T22:00:00Z", "date_only": false, "value": "2025-06-10T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-1277", "record": "WID-SEC-W-2025-1277", "field": "document.tracking.initial_release_date"}, {"timestamp": "2025-06-10T22:00:00Z", "date_only": false, "value": "2025-06-10T22:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-1277", "record": "WID-SEC-W-2025-1277", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2025-06-10T22:35:20.240Z", "date_only": false, "value": "2025-06-10T22:35:20.240409Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3lrbxbuyk2q2z", "record": "CVE-2025-3052", "field": "creation_timestamp", "uuid": "e86c1a06-69f4-4b3a-8493-dce05ded278f", "url": "https://bsky.app/profile/securityrss.bsky.social/post/3lrbxbuyk2q2z"}, {"timestamp": "2025-06-10T22:53:44.086Z", "date_only": false, "value": "2025-06-10T22:53:44.086490Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3lrby4lngpd52", "record": "CVE-2025-3052", "field": "creation_timestamp", "uuid": "a174cac8-e7b3-41b1-b8db-3f86b8667c04", "url": "https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3lrby4lngpd52"}, {"timestamp": "2025-06-11T00:00:00Z", "date_only": false, "value": "2025-06-11T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0499", "record": "CERTFR-2025-AVI-0499", "field": "last_revision_date"}, {"timestamp": "2025-06-11T00:00:00Z", "date_only": false, "value": "2025-06-11T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0499", "record": "CERTFR-2025-AVI-0499", "field": "initial_release_date"}, {"timestamp": "2025-06-11T00:00:00Z", "date_only": false, "value": "2025-06-11T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0499", "record": "CERTFR-2025-AVI-0499", "field": "revisions.0.revision_date"}, {"timestamp": "2025-06-11T00:12:16Z", "date_only": false, "value": "2025-06-11T00:12:16.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/BleepingComputer/22311", "record": "CVE-2025-3052", "field": "creation_timestamp", "uuid": "df404386-9d20-43b3-97b7-028d2a4cdd18", "content": "\u200aNew Secure Boot flaw lets attackers install bootkit malware, patch now\n\nSecurity researchers have disclosed a new Secure Boot bypass tracked as CVE-2025-3052 that can be used to turn off security on PCs and servers and install bootkit malware. [...]\n\nhttps://www.bleepingcomputer.com/news/security/new-secure-boot-flaw-lets-attackers-install-bootkit-malware-patch-now/", "url": "https://t.me/BleepingComputer/22311"}, {"timestamp": "2025-06-11T02:20:47.692Z", "date_only": false, "value": "2025-06-11T02:20:47.692854Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3lrcduz5r6a2r", "record": "CVE-2025-3052", "field": "creation_timestamp", "uuid": "d06f5c63-3ff6-4798-b4a1-b98ca712d70f", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3lrcduz5r6a2r"}, {"timestamp": "2025-06-11T07:01:39Z", "date_only": false, "value": "2025-06-11T07:01:39+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2025-3052", "field": "timestamps.asserted_at", "uuid": "95d559e4-6932-4165-8df5-3fc04ffa35c8", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-06-11T07:01:39Z", "date_only": false, "value": "2025-06-11T07:01:39.000Z", "kind": "kev", "label": "Catalog added", "source": "kevintel", "record": "CVE-2025-3052", "field": "evidence.0.details.added_date", "uuid": "95d559e4-6932-4165-8df5-3fc04ffa35c8", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-06-11T07:01:39Z", "date_only": false, "value": "2025-06-11T07:01:39.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/kasperskyb2b/1772", "record": "CVE-2025-3052", "field": "creation_timestamp", "uuid": "e022164a-81fc-4015-a890-18d52df35c0c", "content": "\ud83d\udcbb \u0418\u044e\u043d\u044c\u0441\u043a\u0438\u0439 Patch Tuesday: \u0434\u0432\u0430 \u0437\u0438\u0440\u043e\u0434\u0435\u044f, \u043e\u0434\u0438\u043d \u0431\u043e\u0435\u0432\u043e\u0439\n\n\u041f\u0435\u0440\u0432\u044b\u0439 \u043b\u0435\u0442\u043d\u0438\u0439 \u0432\u0442\u043e\u0440\u043d\u0438\u043a \u043f\u0430\u0442\u0447\u0435\u0439 \u043e\u043a\u0430\u0437\u0430\u043b\u0441\u044f \u043d\u0435 \u043e\u0447\u0435\u043d\u044c \u043e\u0431\u044a\u0451\u043c\u043d\u044b\u043c \u2014 \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u043e 67 \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u0435\u0439, \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0449\u0438\u0445 10 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0438 57 \u0432\u0430\u0436\u043d\u044b\u0445 \u0434\u0435\u0444\u0435\u043a\u0442\u043e\u0432. 26 \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0442 \u043a RCE, 13 \u2014 EoP, 3 \u2014 \u043e\u0431\u0445\u043e\u0434\u0443 \u0444\u0443\u043d\u043a\u0446\u0438\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, 6 \u2014 DoS, 17 \u2014 \u0443\u0442\u0435\u0447\u043a\u0435 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438.\n\n\u0417\u0438\u0440\u043e\u0434\u0435\u0438\n\u0412 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0441\u044f CVE-2025-33053 (CVSS3.1 8.8) \u2014 RCE \u0432 WebDAV, \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0449\u0438\u0439 \u043a \u0437\u0430\u043f\u0443\u0441\u043a\u0443 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u0441 \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0445, \u043a\u043e\u0433\u0434\u0430 \u0436\u0435\u0440\u0442\u0432\u0430 \u043a\u043b\u0438\u043a\u043d\u0435\u0442 \u043d\u0430 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u0443\u044e \u0441\u0441\u044b\u043b\u043a\u0443. \u0414\u043b\u044f \u0440\u0430\u0437\u043d\u043e\u043e\u0431\u0440\u0430\u0437\u0438\u044f \u0441\u0440\u0430\u0437\u0443 \u0435\u0441\u0442\u044c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0435 \u043f\u043e \u0441\u0430\u043c\u043e\u0439 \u0430\u0442\u0430\u043a\u0435, \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0430\u0441\u044c APT Stealth Falcon \u043f\u0440\u043e\u0442\u0438\u0432 \u043c\u0438\u0448\u0435\u043d\u0435\u0439 \u043d\u0430 \u0411\u043b\u0438\u0436\u043d\u0435\u043c \u0412\u043e\u0441\u0442\u043e\u043a\u0435. \n\n\u0421\u043e \u0432\u0442\u043e\u0440\u044b\u043c 0day \u0434\u0435\u043b\u043e \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u0435\u0435 \u2014 \u044d\u0442\u043e CVE-2025-33073 (8.8), EoP \u0432 SMB-\u043a\u043b\u0438\u0435\u043d\u0442\u0435, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043d\u0435\u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u043f\u0440\u0438 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0438 \u043a \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u043c\u0443 SMB-\u0441\u0435\u0440\u0432\u0435\u0440\u0443 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c system \u043d\u0430 \u043a\u043b\u0438\u0435\u043d\u0442\u0441\u043a\u043e\u0439 \u043c\u0430\u0448\u0438\u043d\u0435. \u0417\u0430 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0431\u043b\u0430\u0433\u043e\u0434\u0430\u0440\u044f\u0442 \u0446\u0435\u043b\u0443\u044e \u0433\u0440\u0443\u043f\u043f\u0443 \u0418\u0411-\u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0439, \u043d\u043e \u043f\u0440\u0438 \u044d\u0442\u043e\u043c \u0440\u0435\u0430\u043b\u044c\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u044f\u043a\u043e\u0431\u044b \u043d\u0435\u0442.  \u0411\u0443\u0434\u0435\u043c \u043d\u0430\u0431\u043b\u044e\u0434\u0430\u0442\u044c \u0437\u0430 \u0440\u0430\u0437\u0432\u0438\u0442\u0438\u0435\u043c \u0441\u043e\u0431\u044b\u0442\u0438\u0439.\n\n\u041e\u043f\u0430\u0441\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438\n\u0426\u0435\u043b\u044b\u0439 \u0431\u0443\u043a\u0435\u0442 \u0434\u0435\u0444\u0435\u043a\u0442\u043e\u0432 Office \u0441\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u0435\u0442 \u0447\u0435\u0440\u0435\u0437 \u043f\u0440\u0435\u0434\u0432\u0430\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0439 \u043f\u0440\u043e\u0441\u043c\u043e\u0442\u0440 \u0438 \u043d\u0435 \u0442\u0440\u0435\u0431\u0443\u0435\u0442 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0439 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f: CVE-2025-47162, -47164, -47167, -47953. \u0412\u0441\u0435 RCE, \u0443 \u0432\u0441\u0435\u0445 CVSS 8.4\n\nCVE-2025-33070 (8.4) \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Netlogon \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u043c\u0443 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0434\u043e\u043c\u0435\u043d\u043d\u043e\u0433\u043e \u0430\u0434\u043c\u0438\u043d\u0430, \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u044f \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0437\u0430\u043f\u0440\u043e\u0441\u044b \u0434\u043e\u043c\u0435\u043d\u043d\u043e\u043c\u0443 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u0443.   \n\nCVE-2025-29828 (8.1) \u2014 RCE \u0432 \u043a\u0440\u0438\u043f\u0442\u043e\u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0430\u0445 Windows, \u0441\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u0435\u0442 \u043f\u0440\u0438 \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0435 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440 \u043c\u043d\u043e\u0433\u043e\u0447\u0438\u0441\u043b\u0435\u043d\u043d\u044b\u0445 \u0444\u0440\u0430\u0433\u043c\u0435\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 TLS ClientHello.\n\n\u0422\u0430\u043a\u0436\u0435 \u0441\u0442\u043e\u044f\u0442 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u044f RCE \u0432 KDC Proxy Service (CVE-2025-33071, 8.1) \u0438 SharePoint (CVE-2025-47172, 8.8)\n\nCVE-2025-32713 (7.8) \u2014 \u0435\u0449\u0451 \u043e\u0434\u043d\u0430 EoP \u0432 CLFS, \u043b\u044e\u0431\u0438\u043c\u0430\u044f \u0440\u0430\u043d\u0441\u043e\u043c\u0432\u0430\u0440\u0449\u0438\u043a\u0430\u043c\u0438. \n\n\u041e\u0441\u043e\u0431\u043d\u044f\u043a\u043e\u043c \u0441\u0442\u043e\u0438\u0442 \u043d\u043e\u0432\u044b\u0439 \u043e\u0431\u0445\u043e\u0434 Secure boot, CVE-2025-3052. \u041a\u0430\u043a \u043e\u0431\u044b\u0447\u043d\u043e, \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0441\u043e\u0441\u0442\u043e\u0438\u0442 \u0432 \u043f\u043e\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0438 \u0431\u0430\u0437\u044b \u043e\u0442\u043e\u0437\u0432\u0430\u043d\u043d\u044b\u0445 \u043c\u043e\u0434\u0443\u043b\u0435\u0439 UEFI, \u043a\u0430\u043a \u043e\u0431\u044b\u0447\u043d\u043e \u0430\u0442\u0430\u043a\u0430 \u043f\u043e\u0437\u0438\u0446\u0438\u043e\u043d\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u043a\u0430\u043a \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u0430\u044f. \u0423\u044f\u0437\u0432\u0438\u043c\u044b\u0435 \u043e\u0431\u0440\u0430\u0437\u044b \u043f\u043e\u0434\u043f\u0438\u0441\u0430\u043d\u044b \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u043c \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u043c 2011 \u0433\u043e\u0434\u0430, \u0438\u0441\u0442\u0435\u0447\u0435\u043d\u0438\u0435 \u043a\u043e\u0442\u043e\u0440\u043e\u0433\u043e \u0441\u043a\u043e\u0440\u043e \u0441\u043e\u0437\u0434\u0430\u0441\u0442 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0434\u043b\u044f \u043f\u043e\u0436\u0438\u043b\u044b\u0445 \u043f\u0430\u0440\u043a\u043e\u0432 \u0442\u0435\u0445\u043d\u0438\u043a\u0438.\n\n#\u043d\u043e\u0432\u043e\u0441\u0442\u0438 #Microsoft @\u041f2\u0422", "url": "https://t.me/kasperskyb2b/1772"}, {"timestamp": "2025-06-11T07:01:39Z", "date_only": false, "value": "2025-06-11T07:01:39+00:00", "kind": "kev", "label": "First seen", "source": "kevintel", "record": "CVE-2025-3052", "field": "timestamps.first_seen_at", "uuid": "95d559e4-6932-4165-8df5-3fc04ffa35c8", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-06-11T07:01:39Z", "date_only": false, "value": "2025-06-11T07:01:39+00:00", "kind": "kev", "label": "Status updated", "source": "kevintel", "record": "CVE-2025-3052", "field": "status.status_updated_at", "uuid": "95d559e4-6932-4165-8df5-3fc04ffa35c8", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-06-11T08:18:27.356Z", "date_only": false, "value": "2025-06-11T08:18:27.356206Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/ssuitesoftware.bsky.social/post/3lrcxugcfz22z", "record": "CVE-2025-3052", "field": "creation_timestamp", "uuid": "f3bc9e24-a6c7-4abe-84c8-afe75e62375a", "url": "https://bsky.app/profile/ssuitesoftware.bsky.social/post/3lrcxugcfz22z"}, {"timestamp": "2025-06-11T10:00:40.457Z", "date_only": false, "value": "2025-06-11T10:00:40.457594Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/mm-ilsoftware-bot.bsky.social/post/3lrd5ldvva32g", "record": "CVE-2025-3052", "field": "creation_timestamp", "uuid": "61df43c5-3509-4775-a4c1-0487c707f9e9", "url": "https://bsky.app/profile/mm-ilsoftware-bot.bsky.social/post/3lrd5ldvva32g"}, {"timestamp": "2025-06-11T14:14:37Z", "date_only": false, "value": "2025-06-11T14:14:37.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/true_secator/7123", "record": "CVE-2025-3052", "field": "creation_timestamp", "uuid": "db44781f-a3ac-4ff1-a49c-2e2fe47de3f5", "content": "\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Binarly \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0438 \u0441\u043f\u043e\u0441\u043e\u0431 \u043e\u0431\u0445\u043e\u0434\u0430 Secure Boot, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a CVE-2025-3052\u00a0 \u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043f\u0440\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0432\u0441\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u044b, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0434\u043e\u0432\u0435\u0440\u044f\u044e\u0442 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u0443 Microsoft UEFI CA 2011, \u0442\u043e \u0435\u0441\u0442\u044c \u043f\u0440\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0432\u0441\u0435 \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u0435, \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u044e\u0449\u0435\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u0443\u044e \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0443.\n\n\u041e\u0411\u043d\u0430\u0440\u0443\u0436\u0438\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u043b \u0430\u043d\u0430\u043b\u0438\u0437 \u0443\u0442\u0438\u043b\u0438\u0442\u044b \u0434\u043b\u044f \u043f\u0435\u0440\u0435\u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0438 BIOS, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u0435\u0440\u0432\u043e\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e \u0431\u044b\u043b\u0430 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043d\u0430 \u0434\u043b\u044f \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u044b\u0445 \u043f\u043b\u0430\u043d\u0448\u0435\u0442\u043e\u0432, \u043d\u043e \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u043e\u043d\u0430 \u043f\u043e\u0434\u043f\u0438\u0441\u0430\u043d\u0430 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u043c UEFI \u043e\u0442 Microsoft, \u0435\u0435 \u043c\u043e\u0436\u043d\u043e \u0437\u0430\u043f\u0443\u0441\u0442\u0438\u0442\u044c \u043d\u0430 \u043b\u044e\u0431\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0441 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u043e\u0439 Secure Boot.\n\n\u0420\u0430\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u043f\u043e\u043a\u0430\u0437\u0430\u043b\u043e, \u0447\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0439 \u043c\u043e\u0434\u0443\u043b\u044c \u0446\u0438\u0440\u043a\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043b \u0432 \u0441\u0435\u0442\u0438 \u043f\u043e \u043a\u0440\u0430\u0439\u043d\u0435\u0439 \u043c\u0435\u0440\u0435 \u0441 \u043a\u043e\u043d\u0446\u0430 2022 \u0433\u043e\u0434\u0430, \u0430 \u0437\u0430\u0442\u0435\u043c, \u0432 2024 \u0433\u043e\u0434\u0443, \u0431\u044b\u043b \u0437\u0430\u0433\u0440\u0443\u0436\u0435\u043d \u043d\u0430 VirusTotal, \u0433\u0434\u0435 \u0435\u0433\u043e \u0438 \u0437\u0430\u0434\u0435\u0442\u0435\u043a\u0442\u0438\u043b\u0430 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Binarly.\n\n\u041f\u043e\u0441\u043b\u0435\u0434\u043d\u044f\u044f \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430 \u043e \u043d\u0430\u0439\u0434\u0435\u043d\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 CERT/CC 26 \u0444\u0435\u0432\u0440\u0430\u043b\u044f 2025 \u0433\u043e\u0434\u0430, \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u043d\u0435\u0435 \u043f\u043e\u0434\u043a\u0430\u0442\u0438\u043b\u0438 \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 Patch Tuesday \u043e\u0442 Microsoft \u0437\u0430 \u0438\u044e\u043d\u044c 2025 \u0433\u043e\u0434\u0430.\n\n\u041f\u043e \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0430\u043c \u043e\u0442\u0440\u0430\u0431\u043e\u0442\u043a\u0438 Microsoft \u043f\u0440\u0438\u0448\u043b\u0430 \u043a \u0432\u044b\u0432\u043e\u0434\u0443, \u0447\u0442\u043e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u043b\u0430 \u043d\u0435 \u043e\u0434\u0438\u043d \u043c\u043e\u0434\u0443\u043b\u044c, \u043a\u0430\u043a \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u0430\u0433\u0430\u043b\u043e\u0441\u044c \u0438\u0437\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e, \u0430 \u043d\u0430 \u0441\u0430\u043c\u043e\u043c \u0434\u0435\u043b\u0435 14 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u043c\u043e\u0434\u0443\u043b\u0435\u0439.\n\n\u0422\u0430\u043a \u0447\u0442\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u044b\u0439 dbx, \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u043d\u044b\u0439 \u0432\u043e \u0432\u0440\u0435\u043c\u044f Patch Tuesday 10 \u0438\u044e\u043d\u044f 2025 \u0433\u043e\u0434\u0430, \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u0442 14 \u043d\u043e\u0432\u044b\u0445 \u0445\u0435\u0448\u0435\u0439.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u044b\u0437\u0432\u0430\u043d\u0430 \u043b\u0435\u0433\u0430\u043b\u044c\u043d\u043e\u0439 \u0443\u0442\u0438\u043b\u0438\u0442\u043e\u0439 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f BIOS, \u043f\u043e\u0434\u043f\u0438\u0441\u0430\u043d\u043d\u043e\u0439 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u043c Microsoft UEFI CA 2011, \u043a\u043e\u0442\u043e\u0440\u043e\u043c\u0443 \u0434\u043e\u0432\u0435\u0440\u044f\u044e\u0442 \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e \u0441\u043e\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0445 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0443 UEFI.\n\n\u041e\u043d\u0430 \u0441\u0447\u0438\u0442\u044b\u0432\u0430\u0435\u0442 \u043f\u0435\u0440\u0435\u043c\u0435\u043d\u043d\u0443\u044e NVRAM (IhisiParamBuffer), \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u0443\u044e \u0434\u043b\u044f \u0437\u0430\u043f\u0438\u0441\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c, \u0431\u0435\u0437 \u0435\u0435 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438.\n\n\u0415\u0441\u043b\u0438 \u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430 \u0435\u0441\u0442\u044c \u043f\u0440\u0430\u0432\u0430 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b, \u043e\u043d \u043c\u043e\u0436\u0435\u0442 \u0438\u0437\u043c\u0435\u043d\u0438\u0442\u044c \u044d\u0442\u0443 \u043f\u0435\u0440\u0435\u043c\u0435\u043d\u043d\u0443\u044e, \u0447\u0442\u043e\u0431\u044b \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u043b\u0438\u0441\u044c \u0432 \u043e\u0431\u043b\u0430\u0441\u0442\u0438 \u043f\u0430\u043c\u044f\u0442\u0438 \u0432\u043e \u0432\u0440\u0435\u043c\u044f \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 UEFI. \u0412\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0440\u0435\u0430\u043b\u0438\u0437\u0443\u0435\u0442\u0441\u044f \u0435\u0449\u0435 \u0434\u043e \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0438\u043b\u0438 \u0434\u0430\u0436\u0435 \u044f\u0434\u0440\u0430.\n\n\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u044d\u0442\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Binarly \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043b\u0438 PoC \u0434\u043b\u044f \u043e\u0431\u043d\u0443\u043b\u0435\u043d\u0438\u044f \u0433\u043b\u043e\u0431\u0430\u043b\u044c\u043d\u043e\u0439 \u043f\u0435\u0440\u0435\u043c\u0435\u043d\u043d\u043e\u0439 gSecurity2, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0434\u043b\u044f \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438.\n\n\u042d\u0442\u0430 \u043f\u0435\u0440\u0435\u043c\u0435\u043d\u043d\u0430\u044f \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u0442 \u0443\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044c \u043d\u0430 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u043d\u044b\u0439 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b Security2, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0444\u0443\u043d\u043a\u0446\u0438\u044f LoadImage \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u0434\u043b\u044f \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438.\n\n\u0423\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0432 \u0435\u0433\u043e \u0432 \u043d\u043e\u043b\u044c, \u0443\u0434\u0430\u0435\u0442\u0441\u044f \u0444\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u0443\u044e \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0443, \u0440\u0430\u0437\u0440\u0435\u0448\u0430\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043b\u044e\u0431\u044b\u0445 \u043d\u0435\u043f\u043e\u0434\u043f\u0438\u0441\u0430\u043d\u043d\u044b\u0445 \u043c\u043e\u0434\u0443\u043b\u0435\u0439 UEFI.\n\n\u041f\u043e\u0441\u043b\u0435 \u043e\u0442\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u041f\u041e \u0442\u0438\u043f\u0430 \u0431\u0443\u0442\u043a\u0438\u0442 \u0441\u043e \u0432\u0441\u0435\u043c\u0438 \u0432\u044b\u0442\u0435\u043a\u0430\u044e\u0449\u0438\u043c\u0438 \u043e\u0442\u0441\u044e\u0434\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f\u043c\u0438.\n\n\u0414\u043b\u044f \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f CVE-2025-3052 Microsoft \u0434\u043e\u0431\u0430\u0432\u0438\u043b\u0430 \u0445\u044d\u0448\u0438 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0445 \u043c\u043e\u0434\u0443\u043b\u0435\u0439 \u0432 \u0441\u043f\u0438\u0441\u043e\u043a \u043e\u0442\u0437\u044b\u0432\u0430 Secure Boot dbx.\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u0434\u043b\u044f \u0437\u0430\u0449\u0438\u0442\u044b \u0441\u0432\u043e\u0438\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 Binarly \u0438 Microsoft \u043d\u0430\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u044e\u0442 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u043d\u0435\u043c\u0435\u0434\u043b\u0435\u043d\u043d\u043e \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u044b\u0439 \u0444\u0430\u0439\u043b dbx \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0445  \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438.\n\n\u041f\u043e\u043c\u0438\u043c\u043e CVE-2025-3052 Microsoft \u043f\u043e\u0444\u0438\u043a\u0441\u0438\u043b\u0430 \u0435\u0449\u0435 \u043e\u0434\u0438\u043d \u043e\u0431\u0445\u043e\u0434 Secure Boot, \u0432\u043b\u0438\u044f\u044e\u0449\u0438\u0439 \u043d\u0430 UEFI-\u0441\u043e\u0432\u043c\u0435\u0441\u0442\u0438\u043c\u0443\u044e \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0443 \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 Insyde H2O.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c,\u00a0\u043d\u0430\u0437\u0432\u0430\u043d\u043d\u0430\u044f Hydroph0bia \u0438 \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u043c\u0430\u044f \u043a\u0430\u043a CVE-2025-4275, \u0431\u044b\u043b\u0430 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0430 Insyde \u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0447\u0435\u0440\u0435\u0437 90 \u0434\u043d\u0435\u0439.", "url": "https://t.me/true_secator/7123"}, {"timestamp": "2025-06-11T14:30:41.888Z", "date_only": false, "value": "2025-06-11T14:30:41.888534Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/solidot.bsky.social/post/3lrdmo6zfee2p", "record": "CVE-2025-3052", "field": "creation_timestamp", "uuid": "b3a1eccb-5b12-4b64-a316-e7e06c8ef911", "url": "https://bsky.app/profile/solidot.bsky.social/post/3lrdmo6zfee2p"}, {"timestamp": "2025-06-11T20:26:02.885Z", "date_only": false, "value": "2025-06-11T20:26:02.885431Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3lreajlgf2c2h", "record": "CVE-2025-3052", "field": "creation_timestamp", "uuid": "17cc5503-496c-49d2-9670-475b420f1759", "url": "https://bsky.app/profile/hacker.at.thenote.app/post/3lreajlgf2c2h"}, {"timestamp": "2025-06-11T20:29:27.191Z", "date_only": false, "value": "2025-06-11T20:29:27.191885Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/rightardia.bsky.social/post/3lreaoxhmzc2v", "record": "CVE-2025-3052", "field": "creation_timestamp", "uuid": "374e2c28-02b6-4cb8-ac9e-9ff2aede083c", "url": "https://bsky.app/profile/rightardia.bsky.social/post/3lreaoxhmzc2v"}, {"timestamp": "2025-06-12T04:40:11.221Z", "date_only": false, "value": "2025-06-12T04:40:11.221167Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3lrf456xaky2b", "record": "cve-2025-3052", "field": "creation_timestamp", "uuid": "c3ffb5aa-b3a7-4bb3-b462-ed431cb6e388", "url": "https://bsky.app/profile/cyberhub.blog/post/3lrf456xaky2b"}, {"timestamp": "2025-06-12T08:59:14.331Z", "date_only": false, "value": "2025-06-12T08:59:14.331254Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/kaldata.bsky.social/post/3lrfkmfr4js2b", "record": "CVE-2025-3052", "field": "creation_timestamp", "uuid": "8d284167-9cbd-42cb-8fbb-d895de8486cc", "url": "https://bsky.app/profile/kaldata.bsky.social/post/3lrfkmfr4js2b"}, {"timestamp": "2025-06-12T09:39:21Z", "date_only": false, "value": "2025-06-12T09:39:21.000000Z", "kind": "sighting", "label": "Seen", "source": "https://threatintel.cc/2025/06/12/found-in-the-wild-secure.html", "record": "CVE-2025-3052", "field": "creation_timestamp", "uuid": "d9958e87-194f-4d41-9bb8-df6cf2fc1e93", "url": "https://threatintel.cc/2025/06/12/found-in-the-wild-secure.html"}, {"timestamp": "2025-06-13T06:00:41.216Z", "date_only": false, "value": "2025-06-13T06:00:41.216354Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/it-connect.bsky.social/post/3lrhr422gti2z", "record": "CVE-2025-3052", "field": "creation_timestamp", "uuid": "7f1153f7-0d00-4c67-8853-bbf440aab0bd", "url": "https://bsky.app/profile/it-connect.bsky.social/post/3lrhr422gti2z"}, {"timestamp": "2025-06-13T23:42:20.740Z", "date_only": false, "value": "2025-06-13T23:42:20.740378Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lrjmgddv5c2g", "record": "CVE-2025-3052", "field": "creation_timestamp", "uuid": "f290ab8c-2d9f-4510-86fa-7d8e944c877e", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lrjmgddv5c2g"}, {"timestamp": "2025-06-16T09:38:59Z", "date_only": false, "value": "2025-06-16T09:38:59.000000Z", "kind": "sighting", "label": "Seen", "source": "https://threatintel.cc/2025/06/16/microsoftsigned-firmware-module-bypasses-secure.html", "record": "CVE-2025-3052", "field": "creation_timestamp", "uuid": "9b13c121-ae9f-4549-a3a6-7f9371f90ccb", "url": "https://threatintel.cc/2025/06/16/microsoftsigned-firmware-module-bypasses-secure.html"}, {"timestamp": "2025-06-16T11:38:47.655Z", "date_only": false, "value": "2025-06-16T11:38:47.655919Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/edwardk/statuses/114692844901497356", "record": "CVE-2025-3052", "field": "creation_timestamp", "uuid": "fe5b48d8-4e15-49fa-9acb-a359263e24b8", "url": "https://infosec.exchange/users/edwardk/statuses/114692844901497356"}, {"timestamp": "2025-06-30T02:24:40Z", "date_only": false, "value": "2025-06-30T02:24:40.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/sysodmins/26146", "record": "CVE-2025-3052", "field": "creation_timestamp", "uuid": "b36441d5-3f30-4ab8-bb49-92299f328563", "content": "\ud83d\udca7 \u0412 Windows 11 \u0438\u0441\u0442\u0435\u043a\u0430\u044e\u0442 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u044b Secure Boot \n\nMicrosoft \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u043b\u0430: \u0441 \u0438\u044e\u043d\u044f 2026 \u0433\u043e\u0434\u0430 \u0438\u0441\u0442\u0435\u043a\u0430\u044e\u0442 \u0441\u0442\u0430\u0440\u044b\u0435 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u044b Secure Boot, \u0431\u0435\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a Windows \u0438 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u044b \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043d\u0435 \u0441\u043c\u043e\u0433\u0443\u0442 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f. \u042d\u0442\u043e \u043a\u0440\u0438\u0442\u0438\u0447\u043d\u043e \u2014 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u0441\u0442\u0430\u043d\u0443\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c\u0438 \u043a \u0431\u0443\u0442\u043a\u0438\u0442\u0430\u043c \u0432\u0440\u043e\u0434\u0435 BlackLotus, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0442 \u0434\u043e \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u041e\u0421 \u0438 \u043b\u0435\u0433\u043a\u043e \u043e\u0431\u0445\u043e\u0434\u044f\u0442 \u0430\u043d\u0442\u0438\u0432\u0438\u0440\u0443\u0441\u044b.\n\nSecure Boot \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0434\u043b\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0437\u0430\u0433\u0440\u0443\u0437\u043e\u0447\u043d\u043e\u0439 \u0446\u0435\u043f\u043e\u0447\u043a\u0438 \u043f\u0440\u0438 \u0441\u0442\u0430\u0440\u0442\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u044b. \u0410\u043a\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0435 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u044b \u0431\u044b\u043b\u0438 \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u044b \u0432 2023 \u0433\u043e\u0434\u0443, \u0438 Microsoft \u043d\u0430\u0447\u043d\u0451\u0442 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u0442\u044c \u0438\u0445 \u0432 \u0431\u043b\u0438\u0436\u0430\u0439\u0448\u0438\u0445 \u0430\u043f\u0434\u0435\u0439\u0442\u0430\u0445. \u0417\u0430\u0442\u0440\u043e\u043d\u0443\u0442 \u043f\u043e\u0447\u0442\u0438 \u0432\u0441\u0435: Windows 10, 11, \u0441\u0435\u0440\u0432\u0435\u0440\u043d\u044b\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u0434\u043e 2025 \u0433\u043e\u0434\u0430, \u0444\u0438\u0437\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0438 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0435 \u043c\u0430\u0448\u0438\u043d\u044b. \u041d\u043e \u043d\u043e\u0432\u044b\u0435 \u041f\u041a Copilot+ \u0441 \u044d\u0442\u0438\u043c \u043d\u0435 \u0441\u0442\u043e\u043b\u043a\u043d\u0443\u0442\u0441\u044f \u2014 \u0443 \u043d\u0438\u0445 \u0443\u0436\u0435 \u0432\u0441\u0451 \u043f\u043e-\u043d\u043e\u0432\u043e\u043c\u0443.\n\n\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u043d\u0435 \u0434\u043e\u0439\u0434\u0443\u0442 \u0434\u043e \u0438\u0437\u043e\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u2014 Microsoft \u0434\u0430\u0441\u0442 \u0438\u043c \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u043d\u0443\u044e \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0443. \u041f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c \u0441\u0442\u0430\u0442\u0443\u0441 \u043c\u043e\u0436\u043d\u043e \u0447\u0435\u0440\u0435\u0437 Win + R \u2192 msinfo32 \u2192 \u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438.\n\n\u041d\u0430 \u0444\u043e\u043d\u0435 \u044d\u0442\u043e\u0433\u043e \u0432\u0441\u043f\u043e\u043c\u0438\u043d\u0430\u0435\u0442\u0441\u044f \u0441\u0432\u0435\u0436\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2025-3052), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043e\u0442\u043a\u043b\u044e\u0447\u0430\u0442\u044c Secure Boot \u0438\u0437-\u0437\u0430 \u043f\u043e\u0434\u043f\u0438\u0441\u0430\u043d\u043d\u043e\u0433\u043e UEFI-\u043c\u043e\u0434\u0443\u043b\u044f. \u0415\u0433\u043e \u043f\u043e\u0434\u043f\u0438\u0441\u0430\u043b\u0438 \u0432 2011-\u043c. \u0412\u0435\u043a \u0436\u0438\u0432\u0438 \u2014 BIOS \u043e\u0431\u043d\u043e\u0432\u043b\u044f\u0439.\n\n\u0422\u0438\u043f\u0438\u0447\u043d\u044b\u0439 \ud83e\udd78 \u0421\u0438\u0441\u0430\u0434\u043c\u0438\u043d", "url": "https://t.me/sysodmins/26146"}, {"timestamp": "2025-07-23T22:00:00Z", "date_only": false, "value": "2025-07-23T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-1277", "record": "WID-SEC-W-2025-1277", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2025-08-11T22:00:00Z", "date_only": false, "value": "2025-08-11T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-1277", "record": "WID-SEC-W-2025-1277", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2025-08-12T22:00:00Z", "date_only": false, "value": "2025-08-12T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-1277", "record": "WID-SEC-W-2025-1277", "field": "document.tracking.revision_history.3.date"}, {"timestamp": "2025-08-27T08:20:13Z", "date_only": false, "value": "2025-08-27T08:20:13.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/0ef634bc-1544-5675-a92a-5628cbc3587a", "record": "CVE-2025-3052", "field": "creation_timestamp", "uuid": "8fe22f83-2ca6-46b5-9a5a-9ec1812b0d4c"}, {"timestamp": "2025-08-27T14:01:56.057Z", "date_only": false, "value": "2025-08-27T14:01:56.057599Z", "kind": "sighting", "label": "Seen", "source": "https://poliverso.org/objects/0477a01e-5996e413-521accfb6cd2622e", "record": "CVE-2025-3052", "field": "creation_timestamp", "uuid": "fb19b94c-ebb8-4649-9437-f273989cb95d", "url": "https://poliverso.org/objects/0477a01e-5996e413-521accfb6cd2622e"}, {"timestamp": "2025-08-30T10:23:40.441Z", "date_only": false, "value": "2025-08-30T10:23:40.441040Z", "kind": "sighting", "label": "Seen", "source": "https://poliverso.org/objects/0477a01e-be4c6ae6-41d04d89fb236f71", "record": "CVE-2025-3052", "field": "creation_timestamp", "uuid": "dbf73bc2-20b9-4412-8757-3fa7593e115a", "url": "https://poliverso.org/objects/0477a01e-be4c6ae6-41d04d89fb236f71"}, {"timestamp": "2025-10-20T22:00:00Z", "date_only": false, "value": "2025-10-20T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-1277", "record": "WID-SEC-W-2025-1277", "field": "document.tracking.revision_history.4.date"}, {"timestamp": "2025-10-20T22:00:00Z", "date_only": false, "value": "2025-10-20T22:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-1277", "record": "WID-SEC-W-2025-1277", "field": "document.tracking.current_release_date"}, {"timestamp": "2025-10-21T08:48:23.827Z", "date_only": false, "value": "2025-10-21T08:48:23.827+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-1277", "record": "WID-SEC-W-2025-1277", "field": "document.tracking.generator.date"}, {"timestamp": "2026-06-17T09:19:06.053Z", "date_only": false, "value": "2026-06-17T09:19:06.053", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-3052", "record": "FKIE_CVE-2025-3052", "field": "lastModified"}, {"timestamp": "2026-06-19T12:46:10.801Z", "date_only": false, "value": "2026-06-19T12:46:10.801016Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/582d605e-3887-47b2-b1ff-13fe9d789179", "record": "CVE-2025-3052", "field": "creation_timestamp", "uuid": "c031f780-eef0-489d-933c-f8759b2ca08e", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/582d605e-3887-47b2-b1ff-13fe9d789179"}, {"timestamp": "2026-06-23T11:11:17Z", "date_only": false, "value": "2026-06-23T11:11:17+00:00", "kind": "kev", "label": "Recorded", "source": "kevintel", "record": "CVE-2025-3052", "field": "timestamps.recorded_at", "uuid": "95d559e4-6932-4165-8df5-3fc04ffa35c8", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-23T11:12:17.329Z", "date_only": false, "value": "2026-06-23T11:12:17.329119Z", "kind": "sighting", "label": "Exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/95d559e4-6932-4165-8df5-3fc04ffa35c8", "record": "CVE-2025-3052", "field": "creation_timestamp", "uuid": "1daa29b8-9356-44f9-a642-e0c0985b925d", "url": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/95d559e4-6932-4165-8df5-3fc04ffa35c8"}, {"timestamp": "2026-07-25T15:00:12.951Z", "date_only": false, "value": "2026-07-25T15:00:12.951667Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ZerodayAlert/518", "record": "CVE-2025-3052", "field": "creation_timestamp", "uuid": "9e44ba54-e8ee-4105-a08d-cf929f3a48d2", "url": "https://t.me/ZerodayAlert/518"}, {"timestamp": "2026-07-26T00:00:30.636Z", "date_only": false, "value": "2026-07-26T00:00:30.636845Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ZerodayAlert/518", "record": "CVE-2025-3052", "field": "creation_timestamp", "uuid": "ca0a81d2-e3f7-41de-9f53-19332a9dfe1a", "url": "https://t.me/ZerodayAlert/518"}, {"timestamp": "2026-08-14T16:00:10.825Z", "date_only": false, "value": "2026-08-14T16:00:10.825108Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/purp_sec/812", "record": "CVE-2025-3052", "field": "creation_timestamp", "uuid": "6df11e1c-f6eb-4836-9d92-a1ec14e49b79", "url": "https://t.me/purp_sec/812"}, {"timestamp": "2026-09-03T07:00:04.464Z", "date_only": false, "value": "2026-09-03T07:00:04.464984Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/MalaysiaHacktivistz/24963", "record": "CVE-2025-3052", "field": "creation_timestamp", "uuid": "181cbc21-9b54-48a0-b294-3cf2b598c06d", "url": "https://t.me/MalaysiaHacktivistz/24963"}, {"timestamp": "2026-09-04T17:00:06.028Z", "date_only": false, "value": "2026-09-04T17:00:06.028617Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/MalaysiaHacktivistz/15581", "record": "CVE-2025-3052", "field": "creation_timestamp", "uuid": "844db166-a651-4d98-bfcf-c8ff4bc6cc61", "url": "https://t.me/MalaysiaHacktivistz/15581"}, {"timestamp": "2026-09-06T14:00:05.383Z", "date_only": false, "value": "2026-09-06T14:00:05.383426Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/192744", "record": "CVE-2025-3052", "field": "creation_timestamp", "uuid": "d1a41abf-6fee-4261-bfeb-f9355381d6bd", "url": "https://t.me/hacking_Attack/192744"}]}