CVE-2016-7247 Microsoft Boot Manager Security Bypass Vulnerability (MS16-140)

This security update resolves a vulnerability in Microsoft Windows. A security feature bypass vulnerability exists when Windows Secure Boot improperly loads a boot policy that is affected by the vulnerability.
The security update addresses the vulnerability by revoking affected boot policies in the firmware.

Affected Versions:-
This security update is rated Important for all supported editions of Windows 8.1, Windows Server 2012, Windows Server 2012 R2, Windows RT 8.1, Windows 10, and Windows Server 2016.

An attacker who successfully exploited this vulnerability could disable code integrity checks, allowing test-signed executables and drivers to be loaded onto a target device. The vulnerability could allow security feature bypass if a physically-present attacker installs an affected boot policy.

Customers are advised to refer to Microsoft Advisory MS16-140 for more details.

Patch:
Following are links for downloading patches to fix the vulnerabilities:

MS16-140