Post

Deleting the BCD through COM as low privileged user (external)

CVE-2025-59253: Demonstrating a vulnerability in Windows that leads to a low privileged user being able to delete the boot configuration data (BCD) through COM.

Posted
Preview Image
By Remco van der Meer
1 min read
Research, Windows
Research Exploitation Red teaming Windows Active Directory vulnerability internals
This post is licensed under CC BY 4.0 by the author.