Client：Windows 11, version 21H2 Windows 10, version 21H2 Windows 10, version 21H1 Windows 10, version 20H2 Windows 10 Enterprise LTSC 2019 Windows 10 Enterprise LTSC 2016 Windows 10 Enterprise 2015 LTSB Windows 8.1.

This issue only affects the Security Update for Secure Boot DBX ( KB5012170 ) and does not affect the latest Cumulative Security Updates, Monthly Rollups, and Security Only Updates released on Aug. When attempting to install KB5012170, the installation may fail with error 0x800f0922. The security update addresses the vulnerability by adding known vulnerable UEFI module signatures to DBX.įor more information about this security vulnerability, please refer to the following advisory:įor more information about this security vulnerability, please refer to the following resources: Bug summary An attacker who successfully exploited this vulnerability could bypass Secure Boot and load untrusted software. This update adds modules to DBX.Ī security feature bypass vulnerability exists in Secure Boot.

The Secure Boot Forbidden Signature Database (DBX) prevents loading of UEFI modules. Windows devices with Unified Extensible Firmware Interface (UEFI)-based firmware can run with Secure Boot enabled. This security update, KB5012170, hardens Secure Boot DBX on supported Windows versions. KB5012170: Security Update Summary for Secure Boot DBX If in doubt, double check your BIOS settings. Also, even if KB5012170 has been successfully applied, UEFI BIOS settings may change after applying. If it is difficult to deal with, let’s wait for Microsoft or the device manufacturer to deal with it. Also, it seems that BitLocker settings may affect it. However, if KB5012170 fails to install and the 0x800f0922 error occurs, dealing with it is somewhat troublesome.įirst, get the latest UEFI BIOS from the device manufacturer beforehand, update it, and then install KB5012170, which may help. KB5012170 is a security update for Secure Boot DBX, and this bug does not affect the latest Cumulative Security Updates, Monthly Rollups, and Security Only Updates released on August 9, 2022. via Windows Update on August 9th, 2022, failed to install, and an error 0x800f0922 was displayed. On August 12th, Microsoft announced that the installation of KB5012170, which was delivered to Windows 10/11, etc.

0x800f0922 server 2016