# Microsoft’s Secure Boot has been broken for a decade and no one noticed until now

> **Open Intelligence Dossier** · First detected: 2026-07-15 00:07 UTC · Category: Technology

## Executive Summary
A decade-old vulnerability in Microsoft-signed UEFI shims has left Secure Boot exposed, requiring urgent updates to prevent system bypasses.

## Intelligence Brief
A critical security flaw has been identified within Microsoft's Secure Boot mechanism, allowing attackers to bypass system protections. According to reports from Ars Technica and The Hacker News, the vulnerability stems from 11 old, Microsoft-signed Linux UEFI shims and forgotten bootloaders. These specific applications were capable of undermining the Secure Boot process on affected devices. The breach remained unnoticed for over ten years, with TechSpot reporting that these bypasses had been hiding in plain sight since 2013. The flaw essentially created a blind spot in the boot process, exposing systems to potential exploitation by hackers using these forgotten, signed bootloaders. Extensive coverage from multiple technical outlets highlights the severity of the discovery. ESET Research is credited by The Manila Times and WeLiveSecurity as the entity that discovered the vulnerable UEFI shims.


Dark Reading and SC Media focus on how these forgotten bootloaders and old Microsoft-signed UEFI applications could be utilized to circumvent security protocols. The reporting emphasizes a significant gap in oversight, as HotHardware explicitly notes that the ability for hackers to bypass Secure Boot had existed for 11 years. The consensus across these outlets is that the vulnerability was a pervasive issue that escaped detection for over a decade despite the ubiquity of the affected software. To understand the context of this event, one must recognize the role of Secure Boot in establishing a chain of trust during the startup process. By using Microsoft-signed shims, the system ensures that only trusted code is executed. However, the existence of old, vulnerable shims meant that an attacker could use a legitimately signed but flawed bootloader to gain unauthorized access. This undermines the primary purpose of UEFI security, which is to prevent unauthorized software from loading before the operating system starts.


The fact that these shims remained valid for so long illustrates a failure in the revocation or updating process of signed boot components over the last decade. Moving forward, users must monitor for specific software updates to mitigate this risk. Neowin reports that Microsoft has released patches to address this major flaw, specifically naming Windows 11 updates KB5101650 and KB5094126. These updates are designed to fix the vulnerabilities that went unnoticed for more than ten years. The immediate priority for administrators and users is the deployment of these specific KB patches to close the Secure Boot blind spot. Future coverage will likely focus on whether these updates successfully revoke the compromised shims across all affected hardware platforms and if any active exploits of these 11 old shims have been detected in the wild.

## Multi-Source Evidence Table
| Source Outlet | Headline | Verification URL |
|---|---|---|
| Dark Reading | Forgotten Bootloaders Expose Secure Boot Blind Spot | [Source Link](https://news.google.com/rss/articles/CBMilAFBVV95cUxPLUpCNU9HV3M0Yk8yZElJeFcwbV9fU1FWMDBSbjM1cXUzcEZpdVlaakJ5M0FOUjl4OHRZWVBuOXpCdzktRHU1c0YydGg1MDRPak10eWpiU0hkZnByQWdUTUE0d3ZxTWlwZXppQ1FUeGFEYmlMUkJ1TlM2eUJBUVFaWndsckZnLXl1MHBBM1dOcFlULVNl?oc=5) |
| HotHardware | Forgotten Microsoft-Signed Bootloaders Let Hackers Bypass Secure Boot For 11 Years | [Source Link](https://news.google.com/rss/articles/CBMisAFBVV95cUxPb1Z2Q2JRaTRaeFRYMnMwN1d5bW5WWk04N1hOWkZTOUpFQWFMYlgzWXNic1VhTmFxUktLcGUxeTlEVzZURFVwQUE1VDlPM3I1aWl1QXVIOWE3cWNEV0E5cmkzN01SWlZaekVLNUFuT3dESHZFZDNCWURXR2JNR1hGMnhyaHhGZ2NFdm1iLTZmUEgyUUdtU25Cc0Q0RXZyUkpCMkpYRG9HT0lkZFo2RVFIbg?oc=5) |
| Neowin | Windows 11 KB5101650, KB5094126 fixes major flaw that went unnoticed for over 10 years | [Source Link](https://news.google.com/rss/articles/CBMitAFBVV95cUxNNzZCdHh0WjVxbmdKLUtnVGotOEdYV0tuX1pwcWwzSjNwd3REQWxsNW1kaEJLdTliYUs1M1p6dUE2UWRfcEpyUTExSFczbXB1OG1KMlJ3MEx1QnRNRlRHM252dTI5TGhPUm1CUzRmUlllNjJnZmJOOWZMWERQWHdFVDZ3NWVrTW8xQi1hTWJYOXQzUnNwREE1OUpYZHMyd0lpeGo2c3BIZzFvMWdsc0VGb3dRWUjSAbMBQVVfeXFMUG5sMnUzbEJwZzlyblEtWGFudnREU19BMzVnQWdMUVNQTWNaX0dUMzJTWnlWUnNVcWc1a25PTnpwWEFjNmJuRXk1aGxkR2ZaQ1gwZnNCNW5QNk1oWEdseWJKemthOHJoak4xdE40b2Fsdk9CR01ONHhHVTh3QXZsMXVBLUpVYXlVQTdnSHB0WDI1dEppY1dQV0t5ZklsZDB) |
| TechSpot | Microsoft finally patched Secure Boot bypasses that were hiding in plain sight since 2013 | [Source Link](https://news.google.com/rss/articles/CBMiowFBVV95cUxNN0M5NHFfT3FuQ01ORW9RQVdZZVVBNFVXVGdFbVplNlVvQWFqX2FvbHNKbkpXRjlreDRpSzM2QW00NjBVQnFRRWtkWExzTGxiV3hBNmNHUFoyV0NKeFhkSkxhcGtlQmZEdDFvaFVxaUY5aTQ1V1JDazEwOVFqNTFWUDZvUEhOV3pQZTFUZ1h2UUxxUVhsRmhoUjVnRjdMQldoVmpJ?oc=5) |
| The Manila Times | ESET Research discovers vulnerable UEFI shims undermining devices’ Secure Boot | [Source Link](https://news.google.com/rss/articles/CBMi5gFBVV95cUxPU3BScF9VdG9xQWxXTDZyRWVmTUdJZVFOYnZlOHRMVnpyRUtHTS1UejI2eXVGSktKWFNXZGM5UXdsUUxZVVVGZVNsMjQzWGtqUmpkdUZQc3VrYk1ldVRkcVJoMlpSZ0ZDa0k4bmJveHFfYUNwVHZlazRNRGItRWhwbTJKeEp0ZEx4LVRjNkJxNkNId0VLVnA4eFB5U2tLSGI4ZnAyVlZkUW5OTUJFN1RPY3IyRXp3UjNoRjZ2dVV1ZVNqUlUwNWQwRThDM3U0S2wwWGc2cG91aDFBYThpVDExQ3pCVDBtQdIB6wFBVV95cUxONGJkdzBFRmRXRmNkNjFwQ2JxdElfRGVTbGtRMVFKUHR6Mm4yTDUyWEdfcm1oZEtfc2ZnMnlGcFJkU1VTRVluMmkxMC1YTktuNm5DM2N1RGpXTjNNVTZLOUtCOElPenROb1lvU19) |
| SC Media | Old Microsoft-signed UEFI applications can bypass Secure Boot | [Source Link](https://news.google.com/rss/articles/CBMilgFBVV95cUxPRXF6TEVERFJfSy1iVzd3X1ZBX1BGYkkyZXNCV2dIUm1wclUzNXZSVFlGRnB5bk4xTFgtM09yUzIxcG9GTmt2eVlqN0tsM29ZVkRrLXZWMVFmbU8xX0Q4WHFTdkNqTkpnckljSjdJWEs4U2dCSVV3cmNCMFZfWTEzX0NnZ3VpZGd2YU5Bcm1HRFRfcmUwc0E?oc=5) |
| The Hacker News | 11 Old Microsoft-Signed Linux UEFI Shims Could Let Attackers Bypass Secure Boot | [Source Link](https://news.google.com/rss/articles/CBMifkFVX3lxTE9wVl95YzhpMTRyaWlQN0ZqZVExWWx6VnQtVmxMU2dNd0F2T19TbW1taDBFT0ZPenBseS16UnNWbFI5YVhnMWsxQ0ZkUllGbndfOGJxRmxwMEJET3A2UFZPU0Y4alFzX21jQ0NKb0VWSDJtTUhXeTlKOVFjVjBNQQ?oc=5) |
| WeLiveSecurity | Forgotten UEFI shims undermining Secure Boot | [Source Link](https://news.google.com/rss/articles/CBMimAFBVV95cUxQa09VcDBLTG5nV005NnlJNHhiekU3S2VVMDdra0hhbG5oNUt4NU04MHdYY1MtNmpWY3l3dmVMeFh5M18yVFRRVlBmM3dkMzUzalBmYzJYVnBjZkVPc1E1enlaNFlZcEZra0tQYUR3bGdBLTBuZG41enM0VXd3MFdvaGNSalRuR2h0Um9NYnhxbW9VMmY1d0YzZA?oc=5) |
| Ars Technica | Microsoft’s Secure Boot has been broken for a decade and no one noticed until now | [Source Link](https://news.google.com/rss/articles/CBMiqAFBVV95cUxQbDdNWDRqSzRtV1JidlFxOWU2Yi15SXU0bnB4UHMwZ1hNenBJZXlGU2VDSnBOWWpBeGl4SUpIRHpEOGVFajRWRW83UF9SSFBSeGZ2LTZwM2t2Nmk2MExadHhoNnA5UHAzQmMyTF9ZNnlBUi1tOG5ZbEJ1eWxvblJiSExJa2R4TkFaQmlpTE14Nkhnc2JSS0FHelhKRmdURm03eHl6TWw2N2w?oc=5) |

---
*Canonical Source: https://pulse.byoviral.com/trend/2026-07-15/microsoft-s-secure-boot-has-been-broken-for-a-decade-and-no-one-noticed-until*