CVE Catalog
CVE-2026-26175
MediumCVSS 4.6Exploitation Probability (EPSS)
Low risk0.47%
39th percentile - higher than 39% of all known CVEs
Summary
A vulnerability in Windows Boot Manager involves use of an uninitialized resource. An unauthorized attacker can bypass a security feature through a physical attack.
Risk Assessment
Someone with physical access to the device can bypass boot security features, potentially enabling execution of unauthorized software or operating systems.
Recommendation
Apply security updates for Windows Boot Manager and restrict physical access to devices, enabling protections such as BitLocker.
Other vulnerabilities in Windows Boot Manager
See allOriginal NVD description (English source)
Use of uninitialized resource in Windows Boot Manager allows an unauthorized attacker to bypass a security feature with a physical attack.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS