Windows 10: blacklotus CVE-2022-21894

What's the latest news on the Blacklotus vulnerability?as CVE-2022-21894I'm becoming paranoid just booting up. The NSA has issued mitigation remedy but also issues a strongly worded caution.... Such as if you don't know what you're doing don't try it because it's difficult. It might be worth the trouble to take it to a professional to apply the NSA mitigation technique. I don't know!This is for Windows 10 and Windows 11. I've included an article from bleeping computer that describes the issue in more detail. If anyone else has something give me a heads up please.https://www.bleepingcomp

:)

 

Was Follina (CVE-2022-30190) not actually addressed in the June 2022 Security Patch?

Hello,

I have an issue with the flow of information when using the MSRC Portal, as the Follina CVE (CVE-2022-30190) is not showing as part of the CVE's addressed in the June 2022 patch, even though it does say that the June 2022 Security Patch fixes the Vulnerability.

Please follow my steps:

MSRC's Follina CVE page Security Update Guide - Microsoft Security Response Center

Navigate to the bottom and select the KB Article for Server 2019 (this applies to all other KB Articles, but this is my example)

https://support.microsoft.com/en-gb...763-3046-62fe56c1-a8c0-40e8-a901-677ab9538bf8

In this article, follow the link under Improvements -> "June 2022 Security Updates."

This brings you back to the MSRC page: Security Update Guide - Microsoft Security Response Center

These release notes DO NOT say that the CVE-2022-30190 was addressed in the June patching...?

Can someone please help here and confirm if the Follina CVE (CVE-2022-30190) patch was actually applied in the June Patch Tuesday release?

 

CVE-2022-30190 workaround for Windows 7

That's your guide from Microsoft:

Guidance for CVE-2022-30190 Microsoft Support Diagnostic Tool Vulnerability

On Monday May 30, 2022, Microsoft issued CVE-2022-30190 regarding the Microsoft Support Diagnostic Tool (MSDT) in Windows vulnerability

/blog/2022/05/guidance-for-cve-2022-30190-microsoft-support-diagnostic-tool-vulnerability/

 

BlackLotus UEFI bootkit: Myth confirmed  

I think they can't block it properly for anyone because they would lock out those who haven't updated:

Further down, under Exploiting CVE-2022-21894;

But perhaps my interpretation is pessimistic!

That's a very good point.