CVE-2026-47656
HighCVSS 7.9Exploitation Probability (EPSS)
Low risk23th percentile - higher than 23% of all known CVEs
Summary
A protection mechanism failure in Windows Boot Manager allows an authorized attacker to bypass a security feature locally.
Risk Assessment
An attacker with physical or local access could bypass Boot Manager protections, enabling unauthorized software to run during startup.
Recommendation
Install the latest Windows security updates available via Windows Update.
Other vulnerabilities in Windows Boot Manager
See all- CVE-2026-77892Medium
No CWE for this issue in Windows Boot Manager allows an unauthenticated attacker to elevate privileges with a physical attack.
- CVE-2026-26175Medium
A vulnerability in Windows Boot Manager involves use of an uninitialized resource. An unauthorized attacker can bypass a security feature through a physical attack.
Original NVD description (English source)
Protection mechanism failure in Windows Boot Manager allows an authorized attacker to bypass a security feature locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS