CVE-2022-34303

CVE-2022-34303 is a medium-severity flaw in Eurosoft bootloaders before 2022-06-01, affecting Eurosoft, Microsoft, and Red Hat products. An attacker with local access to the EFI System Partition can replace the existing signed bootloader with a vulnerable version, bypassing or tampering with Secure Boot protections to execute arbitrary code in the pre-boot stage. This vulnerability has a CVSS score of 6.7, indicating high impact on confidentiality, integrity, and availability. While not actively exploited (KEV: No), it has garnered significant community attention with 6 mentions and 5 media articles, suggesting awareness and potential for future exploitation. No public exploit code (Metasploit, Nuclei, ExploitDB) is currently available.