VULNERABILITY INTELLIGENCE
CVE-2026-58638
CVSS score6 MEDIUM
EPSS probability0.24%
CISA KEVNot currently listed
Published2026-07-14
Last modified2026-07-22
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N
Description
Missing cryptographic step in Windows Boot Loader allows an authorized attacker to bypass a security feature locally.
Weakness classification
- secure@microsoft.com: CWE-325
Primary references
- secure@microsoft.com — Patch, Vendor Advisory