Product:
Windows Boot Loader
Summary
Reliance on untrusted inputs in a security decision in Windows Boot Loader allows an authorized attacker to bypass a security feature locally. This vulnerability can lead to significant security risks, including unauthorized access to sensitive data. It is crucial for users to be aware of this issue to protect their systems.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 6.7 | CVE-2026-0390 |
Exploitation
An attacker with local access can exploit this vulnerability by providing untrusted inputs to the Windows Boot Loader. By doing so, they can bypass security features that are designed to protect the system. This requires high privileges, making it essential for attackers to have some level of access to the target machine.
Affected Products
- Windows Boot Loader: Vulnerable to local attacks that exploit untrusted input handling.
Mitigation
To mitigate this vulnerability, it is recommended to apply the latest security updates provided by Microsoft. Users should ensure that their systems are regularly updated to protect against potential exploits. Additionally, restricting local access to sensitive systems can help reduce the risk of exploitation.