CVE-2025-47827 Secure Boot bypass in Windows exploited in the wild

medium severity · exploited in the wild · published 2025-10-14

Attackers can load unsigned boot code before Windows starts. This gives them kernel-level control that survives operating system reinstalls.

Fixed in: 10.0.26200.6899

CVE: CVE-2025-47827

Source: Microsoft (MSRC)

Get the fix

Fixlane has a reviewed fix procedure for this incident: a read-only check first, then the fix. Ask the Telegram bot, or connect an AI agent to the Fixlane MCP server and call get_fix_prompt with incident id 1570 and your operating system.