CVE-2026-77892
MediumCVSS 6.8Exploitation Probability (EPSS)
Low risk35th percentile - higher than 35% of all known CVEs
Summary
No CWE for this issue in Windows Boot Manager allows an unauthenticated attacker to elevate privileges with a physical attack.
Risk Assessment
A physical attack may allow someone with hardware access to gain elevated privileges, potentially leading to full system compromise.
Recommendation
Apply physical security measures and install security updates for Windows Boot Manager.
Other vulnerabilities in Windows Boot Manager
See all- CVE-2026-47656High
A protection mechanism failure in Windows Boot Manager allows an authorized attacker to bypass a security feature locally.
- CVE-2026-26175Medium
A vulnerability in Windows Boot Manager involves use of an uninitialized resource. An unauthorized attacker can bypass a security feature through a physical attack.
Original NVD description (English source)
No cwe for this issue in Windows Boot Manager allows an unauthorized attacker to elevate privileges with a physical attack.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS