← Retour à la recherche de CVE

CVE-2026-20928

Windows Recovery Environment Agent

Description

Improper removal of sensitive information before storage or transfer in Windows Recovery Environment Agent allows an unauthorized attacker to bypass a security feature with a physical attack.

CVSS 4.6EPSS 0.43%Risque 0.48
Voir la source
Publication
2026-04-14 18:16:42
Versions concernées
unknown
Type
Core software
Vecteur
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Systèmes d’exploitation
Windows