CVE Catalog
CVE-2026-58638
MediumCVSS 6.0Exploitation Probability (EPSS)
Low risk0.23%
14th percentile - higher than 14% of all known CVEs
Summary
A missing cryptographic step in the Windows Boot Loader allows an authorized attacker to bypass a security feature locally.
Risk Assessment
An attacker with physical or local access can bypass boot security mechanisms like Secure Boot and boot an unauthorized operating system.
Recommendation
Apply the latest Windows security update available via Microsoft Update.
Other vulnerabilities in Windows Boot Loader
Original NVD description (English source)
Missing cryptographic step in Windows Boot Loader allows an authorized attacker to bypass a security feature locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS