A security feature bypass vulnerability exists when Windows Secure Boot improperly loads a boot policy that is affected by the vulnerability. An attacker who successfully exploited this vulnerability could disable code integrity checks, allowing test-signed executables and drivers to be loaded onto a target device.
The security update addresses the vulnerability by revoking affected boot policies in the firmware. The revocation protection level depends upon platform firmware

Further information on this exploit is available at : MS16-140