Windows 10: Microsoft's vulnerable driver blocking setting appears locked

yusuf ünal1 · Mar 15, 2025

I need to turn this setting off but it's locked

:)

krisM(2) · Mar 15, 2025

How to enable Microsoft Vulnerable Driver Blocklist

Hello,

I have a new PC with windows 11 pro installed. Vulnerable Driver Block list is greyed out. If I turn off Memory integrity then I can enable Driver block list. However when my PC restarts it is still greyed out when MI is on?

Any suggestions please?

Thank you

Chris

DaveM121 · Mar 15, 2025

core isolation not display Microsoft vulnerable driver blocklist?

Hi, I am Dave, I will help you with this.

If the Vulnerable Driver Block list is not showing up on your system, you can use the registry edits provided by Shawn on this link to enable/disable that list, this works for both Windows 10 and 11.

https://www.elevenforum.com/t/enable-or-disable...

________________________________________________________

Standard Disclaimer: This is a non-Microsoft website. The page appears to be providing accurate, safe information. Watch out for ads on the site that may advertise products frequently classified as a PUP (Potentially Unwanted Products). Thoroughly research any product advertised on the site before you decide to download and install it.

.

Brink · Mar 15, 2025

Microsoft Guidance for blocking vulnerable Windows boot managers

KB5027455: Guidance for blocking vulnerable Windows boot managers Introduction Microsoft was made aware of a vulnerability with the Windows boot manager that allows an attacker to bypass Secure Boot. The issue in the boot manager was fixed and released as a security update. The remaining vulnerability is that an attacker with administrative privileges or physical access to the device can roll back the boot manager to a version without the security fix. This roll-back vulnerability is being used by the BlackLotus malware to bypass Secure Boot described by CVE-2023-24932. To resolve this issue, we will revoke the vulnerable boot managers. Because of the large number of boot managers that must be blocked, we are using an alternative way of blocking the boot managers. This affects non-Windows operating systems in that a fix will have to be provided on those systems to block the Windows boot managers from being used as an attack vector on non-Windows operating systems. More information One method of blocking vulnerable EFI application binaries from being loaded by the firmware is to add hashes of the vulnerable applications to the UEFI Forbidden List (DBX). The DBX list is stored in the devices firmware managed flash. The limitation of this blocking method is the limited firmware flash memory available to store the DBX. Because of this limitation and the large number of boot managers that must be blocked (Windows boot managers from the past 10+ years), relying entirely on the DBX for this issue is not possible. For this issue, we have chosen a hybrid method of blocking the vulnerable boot managers. Only a few boot managers that released in earlier versions of Windows will be added to the DBX. For Windows 10 and later versions, a Windows Defender Application Control (WDAC) policy will be used that blocks vulnerable Windows boot managers. When the policy is applied to a Windows system, the boot manager will “lock” the policy to the system by adding a variable to the UEFI firmware. Windows boot managers will honor the policy and the UEFI lock. If the UEFI lock is in place and the policy has been removed, the Windows boot manager will not start. If the policy is in place, the boot manager will not start if it has been blocked by the policy.
Click to expand...

Read more: https://support.microsoft.com/en-us/...4-ad11119c5e91

Windows 10: Microsoft's vulnerable driver blocking setting appears locked

Microsoft's vulnerable driver blocking setting appears locked

Microsoft's vulnerable driver blocking setting appears locked

Microsoft's vulnerable driver blocking setting appears locked

Microsoft's vulnerable driver blocking setting appears locked - Similar Threads - Microsoft's vulnerable driver

Microsoft's vulnerable driver blocking setting appears locked

core isolation not display Microsoft vulnerable driver blocklist?

Microsoft Vulnerable Driver Blocklist missing

Microsoft Vulnerable Driver Blocklist missing

Microsoft Vulnerable Driver Blocklist - should it be ON and grayed out?

How to enable Microsoft Vulnerable Driver Blocklist

How to enable Microsoft Vulnerable Driver Blocklist

memory integratory is turned on if I enable Microsoft Vulnerable Driver block list it...

memory integratory is turned on if I enable Microsoft Vulnerable Driver block list it...