8 matches found
CVE-2026-20928
Improper removal of sensitive information before storage or transfer in Windows Recovery Environment Agent allows an unauthorized attacker to bypass a security feature with a physical attack...
Microsoft Windows 安全漏洞
Microsoft Windows is an operating system used on personal devices by the American company Microsoft. The Microsoft Windows Recovery Environment Agent has a security vulnerability. Attackers can exploit this vulnerability to bypass certain features. The following products and versions are affected...
CVE-2026-20928: Improper Removal of Sensitive Information Before Storage or Transfer
Improper removal of sensitive information before storage or transfer in Windows Recovery Environment Agent allows an unauthorized attacker to bypass a security feature with a physical attack...
CVE-2025-21202: Improper Access Control
Windows Recovery Environment Agent Elevation of Privilege Vulnerability...
PT-2025-1220
Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description An elevation-of-privilege issue exists within the Windows Recovery Environment Agent component. Successful exploitation of this issue could allow an attacker to gain elevated privileges on th...
CVE-2021-43239: Undefined Security Weakness
Windows Recovery Environment Agent Elevation of Privilege Vulnerability...