Microsoft Is Removing Trust for Cross‑Signed Kernel Drivers and here is How to Validate
Windows | News
Kernel Drivers | WHCP
Microsoft Is Removing Trust for Cross-Signed Kernel Drivers
Microsoft is closing one of Windows’ longest-standing security gaps. Beginning with the April 2026 Windows Update, Windows will no longer trust kernel drivers signed under the legacy Cross-Signed Driver Program. Attackers have abused these drivers for years to load malicious or vulnerable components directly into the kernel.
This change affects Windows 11, Windows Server 2025, and all future releases.
🔐 Why Microsoft Is Making This Change
Cross-signed drivers were originally a convenience...
bios, boot, drivers, IoT, kernel, OT, secure boot, SeSecureBoot, uefi, WHCP