CVE-2026-20928

Improper removal of sensitive information before storage or transfer in Windows Recovery Environment Agent allows an unauthorized attacker to bypass a security feature with a physical attack...

Microsoft Windows 安全漏洞

Microsoft Windows is an operating system used on personal devices by the American company Microsoft. The Microsoft Windows Recovery Environment Agent has a security vulnerability. Attackers can exploit this vulnerability to bypass certain features. The following products and versions are affected...

PT-2025-1220

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description An elevation-of-privilege issue exists within the Windows Recovery Environment Agent component. Successful exploitation of this issue could allow an attacker to gain elevated privileges on th...

Privilege escalation

Windows Recovery Environment Agent Elevation of Privilege Vulnerability...