Yüksek CVSS 7.5
CVE-2026-116638: CVE-2026-116638: kimlik doğrulama atlatma
Açıklama (NVD)
The Windows Recovery Environment (WinRE) in Windows 10 and 11 may allow an attacker to bypass firmware security controls, including administrator-configured UEFI/BIOS passwords. An attacker with physical or administrative access to a device may be able to leverage WinRE-related boot mechanisms to circumvent firmware protections and gain unauthorized access to system resources.
Özet bilgiler
- CVSS v3.1
- 7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N - EPSS
- %0,42 (yüzdelik 36)
- CWE
- CWE-288
- Yama
- Yok / bilinmiyor