>if you can force the target to e.g. boot from a malicious USB device.
If you can control the boot media, aren't you already past the point where you need further exploits to control the machine?
If you can control the boot media, aren't you already past the point where you need further exploits to control the machine?