CVE-2026-21265 — Windows Secure Boot stores Microsoft certificates in the UEFI KEK and DB. These original certificates are approaching expiration, and devices containing affected certificate versions must update them — CVE Database · The Intelligence Room