{"schema":"vulnpedia.research/1","cve":"CVE-2022-21894","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-21894","tags":["vendor-advisory"],"source":"mitre","sourceId":"microsoft","modified":"2025-01-02T18:23:05.577Z","origins":[{"source":"mitre","sourceId":"microsoft","modified":"2025-01-02T18:23:05.577Z","url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-21894"},{"source":"nvd","sourceId":"CVE-2022-21894","modified":"2026-06-17T04:27:13.020","url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-21894"}]},{"url":"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-21894","tags":["x_refsource_MISC","x_transferred"],"source":"mitre","sourceId":"CVE","modified":"2024-08-03T02:53:36.426Z","origins":[{"source":"mitre","sourceId":"CVE","modified":"2024-08-03T02:53:36.426Z","url":"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-21894"},{"source":"nvd","sourceId":"CVE-2022-21894","modified":"2026-06-17T04:27:13.020","url":"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-21894"}]},{"source":"euvd","sourceId":"EUVD-2022-27050","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-27050","tags":["ADVISORY"],"origins":[{"source":"euvd","sourceId":"EUVD-2022-27050","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-27050"}]},{"url":"https://vulncheck.com/kev","tags":["ADVISORY"],"source":"vulncheck-kev","sourceId":"CVE-2022-21894","modified":"2023-03-01T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2022-21894","modified":"2023-03-01T00:00:00Z","url":"https://vulncheck.com/kev"}]},{"url":"https://www.welivesecurity.com/2023/03/01/blacklotus-uefi-bootkit-myth-confirmed/","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2022-21894","modified":"2023-03-01T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2022-21894","modified":"2023-03-01T00:00:00Z","url":"https://www.welivesecurity.com/2023/03/01/blacklotus-uefi-bootkit-myth-confirmed/"}]},{"url":"https://www.binarly.io/blog/the-untold-story-of-the-blacklotus-uefi-bootkit","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2022-21894","modified":"2023-03-01T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2022-21894","modified":"2023-03-01T00:00:00Z","url":"https://www.binarly.io/blog/the-untold-story-of-the-blacklotus-uefi-bootkit"}]},{"url":"https://cisa.gov/news-events/alerts/2023/04/11/microsoft-releases-guidance-for-the-blacklotus-campaign","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2022-21894","modified":"2023-03-01T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2022-21894","modified":"2023-03-01T00:00:00Z","url":"https://cisa.gov/news-events/alerts/2023/04/11/microsoft-releases-guidance-for-the-blacklotus-campaign"}]},{"url":"https://www.microsoft.com/en-us/security/blog/2023/04/11/guidance-for-investigating-attacks-using-cve-2022-21894-the-blacklotus-campaign","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2022-21894","modified":"2023-03-01T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2022-21894","modified":"2023-03-01T00:00:00Z","url":"https://www.microsoft.com/en-us/security/blog/2023/04/11/guidance-for-investigating-attacks-using-cve-2022-21894-the-blacklotus-campaign"}]},{"url":"https://msrc.microsoft.com/blog/2023/05/guidance-related-to-secure-boot-manager-changes-associated-with-cve-2023-24932/","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2022-21894","modified":"2023-03-01T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2022-21894","modified":"2023-03-01T00:00:00Z","url":"https://msrc.microsoft.com/blog/2023/05/guidance-related-to-secure-boot-manager-changes-associated-with-cve-2023-24932/"}]},{"url":"https://media.defense.gov/2023/Jun/22/2003245723/-1/-1/0/CSI_BlackLotus_Mitigation_Guide.PDF","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2022-21894","modified":"2023-03-01T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2022-21894","modified":"2023-03-01T00:00:00Z","url":"https://media.defense.gov/2023/Jun/22/2003245723/-1/-1/0/CSI_BlackLotus_Mitigation_Guide.PDF"}]},{"url":"https://www.binarly.io/blog/from-trust-to-trouble-the-supply-chain-implications-of-a-broken-dbx","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2022-21894","modified":"2023-03-01T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2022-21894","modified":"2023-03-01T00:00:00Z","url":"https://www.binarly.io/blog/from-trust-to-trouble-the-supply-chain-implications-of-a-broken-dbx"}]},{"url":"https://eclypsium.com/blog/the-top-5-firmware-and-hardware-attack-vectors/","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2022-21894","modified":"2023-03-01T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2022-21894","modified":"2023-03-01T00:00:00Z","url":"https://eclypsium.com/blog/the-top-5-firmware-and-hardware-attack-vectors/"}]},{"url":"https://eclypsium.com/blog/threat-detection-bootloaders-bootkits-secureboot/","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2022-21894","modified":"2023-03-01T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2022-21894","modified":"2023-03-01T00:00:00Z","url":"https://eclypsium.com/blog/threat-detection-bootloaders-bootkits-secureboot/"}]},{"url":"https://mp.weixin.qq.com/s?__biz=MzAxODM5ODQzNQ==&mid=2247489797&idx=1&sn=ba62e2c2c8d9f2ebd3a9e3ee3d86f13f&poc_token=HC7Pk2ijKE8QjmJtRs55eWoLhHT2n-05r-liuxF3","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2022-21894","modified":"2023-03-01T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2022-21894","modified":"2023-03-01T00:00:00Z","url":"https://mp.weixin.qq.com/s?__biz=MzAxODM5ODQzNQ==&mid=2247489797&idx=1&sn=ba62e2c2c8d9f2ebd3a9e3ee3d86f13f&poc_token=HC7Pk2ijKE8QjmJtRs55eWoLhHT2n-05r-liuxF3"}]},{"url":"https://media.defense.gov/2025/Dec/11/2003841096/-1/-1/0/CSI_UEFI_SECURE_BOOT.PDF","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2022-21894","modified":"2023-03-01T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2022-21894","modified":"2023-03-01T00:00:00Z","url":"https://media.defense.gov/2025/Dec/11/2003841096/-1/-1/0/CSI_UEFI_SECURE_BOOT.PDF"}]},{"url":"https://core-jmp.org/2026/08/rusty-bootkit-redlotus-uefi/","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2022-21894","modified":"2023-03-01T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2022-21894","modified":"2023-03-01T00:00:00Z","url":"https://core-jmp.org/2026/08/rusty-bootkit-redlotus-uefi/"}]},{"url":"https://vulncheck.com/xdb/57eb7e933e8b","tags":["XDB catalogue"],"source":"vulncheck-kev","sourceId":"57eb7e933e8b","modified":"2023-03-01T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"57eb7e933e8b","modified":"2023-03-01T00:00:00Z","url":"https://vulncheck.com/xdb/57eb7e933e8b"}]},{"url":"https://github.com/nova-master/CVE-2022-21894-Payload-New","tags":["XDB repository"],"source":"vulncheck-kev","sourceId":"57eb7e933e8b","modified":"2023-03-01T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"57eb7e933e8b","modified":"2023-03-01T00:00:00Z","url":"https://github.com/nova-master/CVE-2022-21894-Payload-New"}]},{"url":"https://vulncheck.com/xdb/90504421214d","tags":["XDB catalogue"],"source":"vulncheck-kev","sourceId":"90504421214d","modified":"2023-03-01T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"90504421214d","modified":"2023-03-01T00:00:00Z","url":"https://vulncheck.com/xdb/90504421214d"}]},{"url":"https://github.com/Wack0/batondrop_armv7","tags":["XDB repository"],"source":"vulncheck-kev","sourceId":"90504421214d","modified":"2023-03-01T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"90504421214d","modified":"2023-03-01T00:00:00Z","url":"https://github.com/Wack0/batondrop_armv7"}]},{"url":"https://vulncheck.com/xdb/807a3cee7fcf","tags":["XDB catalogue"],"source":"vulncheck-kev","sourceId":"807a3cee7fcf","modified":"2023-03-01T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"807a3cee7fcf","modified":"2023-03-01T00:00:00Z","url":"https://vulncheck.com/xdb/807a3cee7fcf"}]},{"url":"https://github.com/Wack0/CVE-2022-21894","tags":["XDB repository"],"source":"vulncheck-kev","sourceId":"807a3cee7fcf","modified":"2023-03-01T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"807a3cee7fcf","modified":"2023-03-01T00:00:00Z","url":"https://github.com/Wack0/CVE-2022-21894"}]},{"url":"https://vulncheck.com/xdb/7ed513e238ed","tags":["XDB catalogue"],"source":"vulncheck-kev","sourceId":"7ed513e238ed","modified":"2023-03-01T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"7ed513e238ed","modified":"2023-03-01T00:00:00Z","url":"https://vulncheck.com/xdb/7ed513e238ed"}]},{"url":"https://github.com/ASkyeye/CVE-2022-21894-Payload","tags":["XDB repository"],"source":"vulncheck-kev","sourceId":"7ed513e238ed","modified":"2023-03-01T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"7ed513e238ed","modified":"2023-03-01T00:00:00Z","url":"https://github.com/ASkyeye/CVE-2022-21894-Payload"}]}],"packages":[],"pocCandidates":[{"url":"https://github.com/Wack0/CVE-2022-21894","source":"poc-in-github","sourceId":"CVE-2022-21894","description":"baton drop (CVE-2022-21894): Secure Boot Security Feature Bypass Vulnerability","modified":"2026-10-24T22:38:02Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2022-21894","url":"https://github.com/Wack0/CVE-2022-21894"},{"source":"poc-in-github","sourceId":"CVE-2022-21894","modified":"2026-10-24T22:38:02Z","url":"https://github.com/Wack0/CVE-2022-21894"}],"tags":[]},{"url":"https://github.com/ASkyeye/CVE-2022-21894-Payload","source":"poc-in-github","sourceId":"CVE-2022-21894","description":"Example payload for CVE-2022-21894","modified":"2025-07-05T13:37:38Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2022-21894","url":"https://github.com/ASkyeye/CVE-2022-21894-Payload"},{"source":"poc-in-github","sourceId":"CVE-2022-21894","modified":"2025-07-05T13:37:38Z","url":"https://github.com/ASkyeye/CVE-2022-21894-Payload"}],"tags":[]},{"url":"https://github.com/Wack0/batondrop_armv7","source":"poc-in-github","sourceId":"CVE-2022-21894","description":"An implementation of baton drop (CVE-2022-21894) for armv7 (MSM8960)","modified":"2025-01-05T19:08:06Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2022-21894","url":"https://github.com/Wack0/batondrop_armv7"},{"source":"poc-in-github","sourceId":"CVE-2022-21894","modified":"2025-01-05T19:08:06Z","url":"https://github.com/Wack0/batondrop_armv7"}],"tags":[]},{"url":"https://github.com/bakedmuffinman/BlackLotusDetection","source":"poc-in-github","sourceId":"CVE-2022-21894","description":"Created to help detect IOCs for CVE-2022-21894: The BlackLotus campaign","modified":"2023-04-12T04:06:54Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2022-21894","url":"https://github.com/bakedmuffinman/BlackLotusDetection"},{"source":"poc-in-github","sourceId":"CVE-2022-21894","modified":"2023-04-12T04:06:54Z","url":"https://github.com/bakedmuffinman/BlackLotusDetection"}],"tags":[]},{"url":"https://github.com/qjawls2003/BlackLotus-Detection","source":"poc-in-github","sourceId":"CVE-2022-21894","description":"Public repo for anything CVE-2022-21894","modified":"2023-04-12T05:15:56Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2022-21894","url":"https://github.com/qjawls2003/BlackLotus-Detection"},{"source":"poc-in-github","sourceId":"CVE-2022-21894","modified":"2023-04-12T05:15:56Z","url":"https://github.com/qjawls2003/BlackLotus-Detection"}],"tags":[]},{"url":"https://github.com/nova-master/CVE-2022-21894-Payload-New","source":"poc-in-github","sourceId":"CVE-2022-21894","modified":"2026-03-01T08:48:34Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2022-21894","url":"https://github.com/nova-master/CVE-2022-21894-Payload-New"},{"source":"poc-in-github","sourceId":"CVE-2022-21894","modified":"2026-03-01T08:48:34Z","url":"https://github.com/nova-master/CVE-2022-21894-Payload-New"}],"tags":[]}],"cataloguedPoc":[{"source":"vulncheck-kev","kind":"vulncheck-xdb","verification":"catalogued","sourceId":"57eb7e933e8b","url":"https://vulncheck.com/xdb/57eb7e933e8b","cve":"CVE-2022-21894","dateAdded":"2023-09-26T05:52:36Z","modified":"2023-03-01T00:00:00Z","exploitType":"local","repositoryUrl":"https://github.com/nova-master/CVE-2022-21894-Payload-New","observations":[{"dateAdded":"2023-09-26T05:52:36Z","exploitType":"local"}],"tags":[],"origins":[{"source":"vulncheck-kev","sourceId":"57eb7e933e8b","modified":"2023-03-01T00:00:00Z","url":"https://vulncheck.com/xdb/57eb7e933e8b"}]},{"source":"vulncheck-kev","kind":"vulncheck-xdb","verification":"catalogued","sourceId":"90504421214d","url":"https://vulncheck.com/xdb/90504421214d","cve":"CVE-2022-21894","dateAdded":"2023-12-21T00:01:18Z","modified":"2023-03-01T00:00:00Z","exploitType":"local","repositoryUrl":"https://github.com/Wack0/batondrop_armv7","observations":[{"dateAdded":"2023-12-21T00:01:18Z","exploitType":"local"}],"tags":[],"origins":[{"source":"vulncheck-kev","sourceId":"90504421214d","modified":"2023-03-01T00:00:00Z","url":"https://vulncheck.com/xdb/90504421214d"}]},{"source":"vulncheck-kev","kind":"vulncheck-xdb","verification":"catalogued","sourceId":"807a3cee7fcf","url":"https://vulncheck.com/xdb/807a3cee7fcf","cve":"CVE-2022-21894","dateAdded":"2023-12-21T00:01:23Z","modified":"2023-03-01T00:00:00Z","exploitType":"local","repositoryUrl":"https://github.com/Wack0/CVE-2022-21894","observations":[{"dateAdded":"2023-12-21T00:01:23Z","exploitType":"local"}],"tags":[],"origins":[{"source":"vulncheck-kev","sourceId":"807a3cee7fcf","modified":"2023-03-01T00:00:00Z","url":"https://vulncheck.com/xdb/807a3cee7fcf"}]},{"source":"vulncheck-kev","kind":"vulncheck-xdb","verification":"catalogued","sourceId":"7ed513e238ed","url":"https://vulncheck.com/xdb/7ed513e238ed","cve":"CVE-2022-21894","dateAdded":"2024-10-22T09:02:44Z","modified":"2023-03-01T00:00:00Z","exploitType":"local","repositoryUrl":"https://github.com/ASkyeye/CVE-2022-21894-Payload","observations":[{"dateAdded":"2024-10-22T09:02:44Z","exploitType":"local"}],"tags":[],"origins":[{"source":"vulncheck-kev","sourceId":"7ed513e238ed","modified":"2023-03-01T00:00:00Z","url":"https://vulncheck.com/xdb/7ed513e238ed"}]}],"vendorStatements":[],"exploitationSources":[{"source":"vulncheck-kev","sourceId":"CVE-2022-21894","catalog":"VulnCheck KEV","kind":"catalogue","url":"https://vulncheck.com/kev","dateAdded":"2023-03-01T00:00:00Z","modified":"2023-03-01T00:00:00Z","requiredAction":"Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.","knownRansomwareCampaignUse":"Unknown","reportedByVulncheckCanaries":false,"vendorProject":"Microsoft","product":"Windows","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2022-21894","modified":"2023-03-01T00:00:00Z","url":"https://vulncheck.com/kev"}]},{"source":"vulncheck-kev","sourceId":"CVE-2022-21894","catalog":"VulnCheck KEV","kind":"report","url":"https://www.welivesecurity.com/2023/03/01/blacklotus-uefi-bootkit-myth-confirmed/","dateAdded":"2023-03-01T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2022-21894","url":"https://www.welivesecurity.com/2023/03/01/blacklotus-uefi-bootkit-myth-confirmed/"}]},{"source":"vulncheck-kev","sourceId":"CVE-2022-21894","catalog":"VulnCheck KEV","kind":"report","url":"https://www.binarly.io/blog/the-untold-story-of-the-blacklotus-uefi-bootkit","dateAdded":"2023-03-03T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2022-21894","url":"https://www.binarly.io/blog/the-untold-story-of-the-blacklotus-uefi-bootkit"}]},{"source":"vulncheck-kev","sourceId":"CVE-2022-21894","catalog":"VulnCheck KEV","kind":"report","url":"https://cisa.gov/news-events/alerts/2023/04/11/microsoft-releases-guidance-for-the-blacklotus-campaign","dateAdded":"2023-04-11T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2022-21894","url":"https://cisa.gov/news-events/alerts/2023/04/11/microsoft-releases-guidance-for-the-blacklotus-campaign"},{"source":"vulncheck-kev","sourceId":"CVE-2022-21894","url":"https://www.microsoft.com/en-us/security/blog/2023/04/11/guidance-for-investigating-attacks-using-cve-2022-21894-the-blacklotus-campaign"}]},{"source":"vulncheck-kev","sourceId":"CVE-2022-21894","catalog":"VulnCheck KEV","kind":"report","url":"https://msrc.microsoft.com/blog/2023/05/guidance-related-to-secure-boot-manager-changes-associated-with-cve-2023-24932/","dateAdded":"2023-05-09T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2022-21894","url":"https://msrc.microsoft.com/blog/2023/05/guidance-related-to-secure-boot-manager-changes-associated-with-cve-2023-24932/"}]},{"source":"vulncheck-kev","sourceId":"CVE-2022-21894","catalog":"VulnCheck KEV","kind":"report","url":"https://media.defense.gov/2023/Jun/22/2003245723/-1/-1/0/CSI_BlackLotus_Mitigation_Guide.PDF","dateAdded":"2023-06-22T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2022-21894","url":"https://media.defense.gov/2023/Jun/22/2003245723/-1/-1/0/CSI_BlackLotus_Mitigation_Guide.PDF"}]},{"source":"vulncheck-kev","sourceId":"CVE-2022-21894","catalog":"VulnCheck KEV","kind":"report","url":"https://www.binarly.io/blog/from-trust-to-trouble-the-supply-chain-implications-of-a-broken-dbx","dateAdded":"2025-01-21T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2022-21894","url":"https://www.binarly.io/blog/from-trust-to-trouble-the-supply-chain-implications-of-a-broken-dbx"}]},{"source":"vulncheck-kev","sourceId":"CVE-2022-21894","catalog":"VulnCheck KEV","kind":"report","url":"https://eclypsium.com/blog/the-top-5-firmware-and-hardware-attack-vectors/","dateAdded":"2025-04-16T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2022-21894","url":"https://eclypsium.com/blog/the-top-5-firmware-and-hardware-attack-vectors/"}]},{"source":"vulncheck-kev","sourceId":"CVE-2022-21894","catalog":"VulnCheck KEV","kind":"report","url":"https://eclypsium.com/blog/threat-detection-bootloaders-bootkits-secureboot/","dateAdded":"2025-05-22T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2022-21894","url":"https://eclypsium.com/blog/threat-detection-bootloaders-bootkits-secureboot/"}]},{"source":"vulncheck-kev","sourceId":"CVE-2022-21894","catalog":"VulnCheck KEV","kind":"report","url":"https://mp.weixin.qq.com/s?__biz=MzAxODM5ODQzNQ==&mid=2247489797&idx=1&sn=ba62e2c2c8d9f2ebd3a9e3ee3d86f13f&poc_token=HC7Pk2ijKE8QjmJtRs55eWoLhHT2n-05r-liuxF3","dateAdded":"2025-08-05T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2022-21894","url":"https://mp.weixin.qq.com/s?__biz=MzAxODM5ODQzNQ==&mid=2247489797&idx=1&sn=ba62e2c2c8d9f2ebd3a9e3ee3d86f13f&poc_token=HC7Pk2ijKE8QjmJtRs55eWoLhHT2n-05r-liuxF3"}]},{"source":"vulncheck-kev","sourceId":"CVE-2022-21894","catalog":"VulnCheck KEV","kind":"report","url":"https://media.defense.gov/2025/Dec/11/2003841096/-1/-1/0/CSI_UEFI_SECURE_BOOT.PDF","dateAdded":"2025-12-11T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2022-21894","url":"https://media.defense.gov/2025/Dec/11/2003841096/-1/-1/0/CSI_UEFI_SECURE_BOOT.PDF"}]},{"source":"vulncheck-kev","sourceId":"CVE-2022-21894","catalog":"VulnCheck KEV","kind":"report","url":"https://core-jmp.org/2026/08/rusty-bootkit-redlotus-uefi/","dateAdded":"2026-08-05T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2022-21894","url":"https://core-jmp.org/2026/08/rusty-bootkit-redlotus-uefi/"}]}]}