Microsoft Patch Tuesday for April 2026
60
CVE-2026-0390
—CVSS 3.1
6.7 medium
EPSS
<1%p24
Published
()
Modified
Description
Reliance on untrusted inputs in a security decision in Windows Boot Loader allows an authorized attacker to bypass a security feature locally.
- Vendors
- microsoft
- Products
- windows 10 1607, windows 10 1809, windows 10 21h2, windows 10 22h2, windows server 2016, windows server 2019, windows server 2022
- Weakness
- CWE-807
- Vector
- CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H