← Back to CVE search

CVE-2026-20928

Windows Recovery Environment Agent

Description

Improper removal of sensitive information before storage or transfer in Windows Recovery Environment Agent allows an unauthorized attacker to bypass a security feature with a physical attack.

CVSS 4.6EPSS 0.43%Risk 0.48
View source
Published
2026-04-14 18:16:42
Affected versions
unknown
Type
Core software
Vector
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Operating systems
Windows