EUVD-2026-67240
GHSA-4rwm-w4qm-p8q2
Severity by source
AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N
Local access and high-privilege required to invoke Secure Boot controls; integrity and confidentiality fully impacted by disabling boot chain verification; no availability impact.
Primary rating from Vendor (mitre).
CVSS VectorVendor: mitre
Lifecycle Timeline
1DescriptionCVE.org
EAZ EazyFix 12.9 allows a Security Feature Bypass related to a "Missing Cryptographic Step" associated with "Secure Boot disable."
AnalysisAI
EAZ EazyFix 12.9 exposes a security feature bypass (CWE-325: Missing Required Cryptographic Step) that allows a highly privileged local attacker to disable Secure Boot, undermining the firmware-level integrity chain that prevents unauthorized boot components from executing. The MSRC entry at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-25250 confirms Microsoft ecosystem relevance, suggesting the flaw interacts with Windows Secure Boot validation. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires two concrete preconditions: (1) local interactive or remote desktop access to the target system, as the CVSS vector specifies AV:L; and (2) high-privilege credentials (administrator or equivalent), as specified by PR:H in the CVSS vector. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 3.1 base vector AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N yields a score of 6.0 (Medium), reflecting two key constraints that materially limit real-world risk: the attacker must already hold local administrative privileges (PR:H), and physical or interactive local access is required (AV:L). … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | No specific patch version is identified in the available intelligence data. … Detailed patch versions, workarounds, and compensating controls in full report. |
Threat intelligence, references, and detailed analysis are available after sign-in.
Same weakness CWE-325 – Missing Cryptographic Step
View allSame technique Authentication Bypass
View allShare
External POC / Exploit Code
Leaving vuln.today