Botnets, rootkits, virus, malware.

That’s how fine PC’s have been doing software.

Search for your preferred PC brand and list of CVEs.

I’ve had Windows / malware roll back a BIOS update to a previous version that had a know (published CVE) remote code execution vulnerability complete with published proof of concept.