Windows Security Center in Windows 10/11 is now more reassuring. As announced by David Weston, Microsoft’s vice president of operating system security and enterprise, the built-in free Windows antivirus now offers a new option to protect against vulnerable drivers. It’s just that I haven’t seen this option in Windows 11 yet.
This new option for Windows Security is called “Microsoft Vulnerable Driver Blocklist” (Microsoft Vulnerable Driver Blocklist). It sounds simple, but it has become a common problem. According to Microsoft, malicious actors are exploiting vulnerabilities in legitimate, signed kernel drivers to run malware in the Windows kernel.
Here’s how the feature helps prevent this: “Microsoft works closely with our IHVs and the security community to ensure the highest level of driver security for our customers, and when drivers become vulnerable, they are quickly patched And rolled out to the entire ecosystem. Microsoft then adds the vulnerable driver version to our ecosystem blocking policy.”
This feature should also land on those Hypervisor-protected code integrity (HVCI) devices or Windows 10 booting S Mode devices. When your system is ready, it should show up under the Device Security section of Windows Security.