CVE-2026-102221
MediumCVSS 4.4Exploitation Probability (EPSS)
Low risk23th percentile - higher than 23% of all known CVEs
Summary
No CWE assigned for this issue in Windows Secure Boot allows an authorized attacker to bypass a security feature locally.
Risk Assessment
Risk includes compromise of boot integrity, potentially leading to execution of unauthorized software.
Recommendation
Apply latest Windows updates and monitor Secure Boot integrity.
Other vulnerabilities in Windows Secure Boot
See all- CVE-2026-69713Medium
Dependency on vulnerable third-party component in Windows Secure Boot allows an authorized attacker to bypass a security feature locally.
- CVE-2026-49783High
Improperly implemented security check for Secure Boot in Windows allows an authorized attacker to bypass a security feature locally.
- CVE-2026-48578High
Windows Secure Boot has an improper access control vulnerability that allows an authorized attacker to elevate privileges locally.
- CVE-2026-48576High
A vulnerability in Windows Secure Boot allows an authorized attacker to bypass a security feature locally.
- CVE-2026-48575High
A protection mechanism failure in Windows Secure Boot allows an authorized attacker to bypass a security feature locally.
- CVE-2026-48573High
A vulnerability in Windows Secure Boot allows an authorized attacker to bypass a security feature locally.
- CVE-2026-48570High
A protection mechanism failure in Windows Secure Boot allows an authorized attacker to bypass a security feature locally.
- CVE-2026-48568High
A protection mechanism failure in Windows Secure Boot allows an authorized attacker to bypass a security feature locally.
- CVE-2026-45654High
Improper access control in Windows Secure Boot allows an authorized attacker to bypass a security feature locally.
- CVE-2026-45588High
A protection mechanism failure in Windows Secure Boot allows an authorized attacker to bypass a security feature locally.
Original NVD description (English source)
No cwe for this issue in Windows Secure Boot allows an authorized attacker to bypass a security feature locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS