CVE Catalog
CVE-2026-49785
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk0.34%
26th percentile - higher than 26% of all known CVEs
Summary
Improper resource shutdown or release in Windows UEFI allows an authorized attacker to bypass a security feature locally.
Risk Assessment
An authorized user can bypass UEFI security features, potentially allowing unauthorized software execution.
Recommendation
Install UEFI firmware updates and restrict physical access to the system.
Other vulnerabilities in Windows UEFI
Original NVD description (English source)
Improper resource shutdown or release in Windows UEFI allows an authorized attacker to bypass a security feature locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS