CVE-2026-0390

25th percentile - higher than 25% of all known CVEs

Reliance on untrusted inputs in a security decision in Windows Boot Loader allows an authorized attacker to bypass a security feature locally.

An attacker with local access could bypass boot security mechanisms, potentially leading to execution of unsigned or malicious components. This may compromise system integrity.

Apply Windows security updates provided by Microsoft. Additionally, consider enabling secure boot and monitoring boot integrity.