KB5012170: Windows Update error 0x800f0922, UEFI Bios update may fix it
Microsoft released cumulative updates for all supported Windows versions on the August 2022 Patch Day. The company did release a second Windows security update of the day to address issues in Secure Boot DBX.
#Installing the second update may throw error 0x800f0922, so the update cannot be installed.
Microsoft describes the issue on the Known Issues and Notifications support page for supported operating systems such as Windows 11 and Windows 10.
When trying to install KB5012170, it may fail to install and you may receive error 0x800f0922.
This issue is not related to the installation of Windows cumulative updates released by Microsoft on the same day.
Microsoft recommends that administrators can resolve this issue by updating the system's UEFI bios to the latest version before installing KB5012170. Whether this is possible depends on the version of UEFI BIOS installed and whether updates are available.
The company is currently investigating the issue and plans to "provide an update in an upcoming release."
Secure Boot DBX Update
The support page for the Secure Boot DBX update contains more information. This update has been released for multiple supported client and server versions of Windows operating systems, including Windows 8.1, Windows 10, and Windows 11.
This update improves Secure Boot DBX in Windows:
This security update improves Secure Boot DBX for the supported Windows versions listed in the Applies to section .
Secure Boot is supported on Windows devices with UEFI-based firmware. Secure Boot is a security feature that protects the system boot process. Secure Boot Forbidden Signature Database (DBX) database "prevents loading of UEFI module". Microsoft confirms update KB5012170 adds modules to DBX.
This update resolves a security feature bypass vulnerability in Secure Boot by updating DBX with information about the signatures of known vulnerable UEFI modules. An attacker could exploit this issue to bypass Secure Boot and load untrusted software.
An advisory page on the Microsoft website provides more information about this issue. According to Microsoft, the security issue was discovered in the GRUB boot loader commonly used by Linux.
To exploit this vulnerability, an attacker would need administrative privileges or physical access on a system where Secure Boot is configured to trust the Microsoft Unified Extensible Firmware Interface (UEFI) Certificate Authority (CA).
An attacker could install an affected GRUB and run arbitrary boot code on the target device. Successfully exploiting this vulnerability could allow an attacker to disable further code integrity checks, allowing arbitrary executables and drivers to be loaded on the target device.
Judging from the description, most Windows devices are not immediately at risk.
KB5012170 is available through Windows Update, other update management systems, and for direct download on the Microsoft Update Catalog website.
The above is the detailed content of KB5012170: Windows Update error 0x800f0922, UEFI Bios update may fix it. For more information, please follow other related articles on the PHP Chinese website!
Hot AI Tools
Undresser.AI Undress
AI-powered app for creating realistic nude photos
AI Clothes Remover
Online AI tool for removing clothes from photos.
Undress AI Tool
Undress images for free
Clothoff.io
AI clothes remover
AI Hentai Generator
Generate AI Hentai for free.
Hot Article
Hot Tools
Notepad++7.3.1
Easy-to-use and free code editor
SublimeText3 Chinese version
Chinese version, very easy to use
Zend Studio 13.0.1
Powerful PHP integrated development environment
Dreamweaver CS6
Visual web development tools
SublimeText3 Mac version
God-level code editing software (SublimeText3)
Hot Topics
1378
52
Ventoy secure boot settingsSecure Boot
Jun 18, 2024 pm 09:00 PM
Ventoy is a USB boot tool that can directly boot ISO/WIM/IMG/VHD(x)/EFI and other types of files in the USB flash drive. It is very easy to use. Laptops have secure boot turned on by default. If they are not turned off or cannot be turned off, they cannot be booted from a USB device. Ventoy also supports secure boot. The principle is to inject a GRUB installation certificate into the current computer. As long as your computer After being injected once, any USB disk PE booted based on grub can pass. The official description of Ventoy is a GIF image. The playback speed is too fast and you may not be able to remember it. The editor has divided the GIF image to make it easier to understand. Ventoy secure boot has EnrollKey and Enro
How to increase VRAM in Windows 11
May 05, 2023 pm 04:25 PM
Are you receiving warnings about your computer's graphics card memory when using graphics-intensive software or a new game? To prevent these issues and run resource-intensive games or applications smoothly, you need a graphics card and RAM that meet its specifications. Whether your computer is old or has graphics issues for no apparent reason, you can fix the problem by adjusting a few parameters in certain situations. The method we will cover in this article is to increase VRAM in Windows 11, which is one of the most effective ways to get the most out of your computer, especially your graphics card. But before we get into it, let's see what VRAM is and what it does. So, without further ado, let’s get started. Why increase video memory? What aspects of gaming and graphics software do we need to point out?
Fix: VAN 1067 error when running Valorant on Windows 11
May 22, 2023 pm 02:41 PM
The operating system looks much better than its predecessor and has gamer-oriented features like AutoHDR and DirectStorage, but Valorant players have had some trouble launching the game. This is not the first issue faced by gamers earlier, Valorant not opening on Windows 11 is another issue plaguing them but we have covered the ways to fix it. Now it seems that Valorant players who switched to Windows 11 are facing issues due to Secure Boot and TPM2.0 services, which causes the game menu to only show an exit option while running. Many users are getting the VAN1067 error, but it shouldn't be a cause for alarm
How to adjust the speed of your computer fan in Windows 11?
May 06, 2023 pm 06:55 PM
You may have had to shut down the system at least once due to overheating, or it may have shut down on its own. We've all been there. But what if you could manually control the fan in Windows 11 for optimal results? Most people would be excited by the idea of manually controlling fan speed, but it's not that straightforward. You have to find the right app that is both compatible and offers the option to not only view but also control the speed. In the following sections, we'll list various ways to obtain the right tools from OEM or third-party sources, as well as fan control in Windows 11 via the BIOS. What should I know about fan control in Windows 11? Although the built-in settings should be able to
Acer laptop disables secure boot and removes password in Bios
Jun 19, 2024 am 06:49 AM
I repaired an Acer laptop and had to turn off secure boot when entering PE. I recorded how to turn off secure boot and remove the password from Bios. Turn on the computer and when the screen is not on, keep pressing the F2 key to enter the BIOS. On Acer laptops, turn off Secure Boot and press the arrow keys to switch to Boot. If SecureBoot is gray and unclickable, switch to the Security page, select SetSupervisorPassword and press Enter to set the password. Then switch to Boot, SecureBoot can be selected as Disabled, and press F10 to save. Modify and clear the BIOS password on your Acer notebook. Switch to the Security menu and select SetSupervisorPasswo.
Enable Secure Boot in Windows 11 User Mode: 3 Tips
May 06, 2023 pm 06:25 PM
Secure Boot is a security feature integrated into most current hardware and UEFI firmware that provides a secure environment for booting any Windows system. This utility prevents malware from hijacking the device during the boot process. This feature works like a security door, which can be tricky when you enable Secure Boot for Windows 11 in user mode. If your system uses an older boot framework and Secure Boot is not enabled, the Secure Boot state is not supported. Even if your motherboard includes a secure boot option. Let's look at some possible solutions. This solution perfectly solves the problem of Secure Boot not supported on all devices including HP, Dell and Lenovo laptops or ASRock and Gyg
Dell computer bios interface to set USB disk startup items
Feb 10, 2024 pm 10:09 PM
How do you set up a USB drive if your computer is a Dell laptop? Many friends have found that Dell laptops will not display the USB disk option by pressing the boot hotkey, so they need to enter the BIOS to set up the USB disk boot, so what if they don't know how to operate it? Now follow the editor’s steps to demonstrate how to set up a USB flash drive on a Dell laptop. Many friends assemble Dell computers, but don't know how to use the USB boot tool after entering the USBPE interface. Many friends don't know that they need to enter the BIOS interface to set up USB boot, so pressing the boot hotkey will not appear. what should we do? Let’s see how Dell sets up USB boot! Set up Dell laptop to reinstall system bootable from USB disk
The system has posted in safe mode ASUS motherboard
Jun 19, 2024 am 07:35 AM
After the computer is turned on, it prompts The system has posted in safe mode. You can set it in the BIOS to ignore the F1 error. Although it does not prompt, it directly enters the BIOS when it is turned on. Sometimes F1 is useless every time it is turned on. Then you need to restart the BIOS, and then exit the BIOS to enter the system. . thesystemhaspostedinsafemode=The system is in safe mode. This problem is relatively common on ASUS motherboards. As long as you turn off the XMP of the memory and adjust the memory frequency back to normal, you can boot normally without the thesystemhaspostedinsafemode error. Updating the latest motherboard BIOS should be OK.