CVE-2026-20928
Improper removal of sensitive information before storage or transfer in Windows Recovery Environment Agent allows an unauthorized attacker to bypass a security feature with a physical attack.
Debilidad
Improper removal of sensitive information before storage or transfer in Windows Recovery Environment Agent allows an unauthorized attacker to bypass a security feature with a physical attack.
Productos afectados
- microsoft windows_10_1607
- microsoft windows_10_1809
- microsoft windows_10_21h2
- microsoft windows_10_22h2
- microsoft windows_11_23h2
- microsoft windows_11_24h2
- microsoft windows_11_25h2
- microsoft windows_11_26h1
Referencias
Encuentra el fallo antes que un atacante.
Inicia sesión con GitHub y ejecuta tu primera auditoría en menos de un minuto. El plan gratuito no requiere tarjeta de crédito.