Microsoft Windows 安全漏洞

Microsoft Windows is an operating system used on personal devices by the American company Microsoft. The Microsoft Windows Recovery Environment Agent has a security vulnerability. Attackers can exploit this vulnerability to bypass certain features. The following products and versions are affected...

CVE-2026-20928: Improper Removal of Sensitive Information Before Storage or Transfer

Improper removal of sensitive information before storage or transfer in Windows Recovery Environment Agent allows an unauthorized attacker to bypass a security feature with a physical attack...

CVE-2025-21202: Improper Access Control

Windows Recovery Environment Agent Elevation of Privilege Vulnerability...

Privilege escalation

Windows Recovery Environment Agent Elevation of Privilege Vulnerability...