EUVD-2026-73603
GHSA-fw5h-gg35-fx5m
Severity by source
AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N
Local access with admin privileges required to manipulate Secure Boot chain; sole impact is boot integrity bypass, no confidentiality or availability effect.
Primary rating from Vendor (microsoft).
CVSS VectorVendor: microsoft
Lifecycle Timeline
3DescriptionCVE.org
Dependency on vulnerable third-party component in Windows Secure Boot allows an authorized attacker to bypass a security feature locally.
AnalysisAI
Windows Secure Boot security feature bypass affects a broad range of Windows client and server releases, from Windows 10 1607 through Windows 11 26H1 and Windows Server 2012 through 2025. The root cause is a dependency on a vulnerable third-party component embedded within the Secure Boot trust chain, enabling a locally present, high-privileged attacker to bypass boot integrity enforcement. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires local, interactive or remote access with high privileges (administrator-equivalent) on the target Windows system. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS score of 4.4 (Medium) is commensurate with the constraint that exploitation requires local, high-privilege access (PR:H) - meaning the attacker must already be an administrator or have equivalent local control. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Apply the vendor-released patches through Windows Update or WSUS, targeting the fixed build numbers listed per release: Windows 11 25H2 → 10.0.26200.9445, Windows 11 24H2 → 10.0.26100.9445, Windows 11 26H1 → 10.0.28000.2954, Windows 11 23H2 → 10.0.22631.7582, Windows 10 22H2/21H2 → 10.0.19045/19044.7725, Windows 10 1809/Server 2019 → 10.0.17763.9245, Windows 10 1607/Server 2016 → 10.0.14393.9512, Server 2022 → 10.0.20348.5622, Server 2025 → 10.0.26100.33438, Server 2012 R2 → 6.3.9600.23397, Server 2012 → 6.2.9200.26349. … Detailed patch versions, workarounds, and compensating controls in full report. |
Threat intelligence, references, and detailed analysis are available after sign-in.
Same technique Authentication Bypass
View allShare
External POC / Exploit Code
Leaving vuln.today