CVE-2026-49785

Published: Ott 13, 2026 Last Modified: Ott 14, 2026

ExploitDB:

Other exploit source:

Google Dorks:

HIGH 7,8

Source: [email protected]

Attack Vector: local

Attack Complexity: low

Privileges Required: low

User Interaction: none

Scope: unchanged

Confidentiality: high

Integrity: high

Availability: high

AI Translation Available

Improper resource shutdown or release in Windows UEFI allows an authorized attacker to bypass a security feature locally.

404

Draft

Abstraction: Class Structure: Simple

Security Scopes Affected:

Availability Other Confidentiality

Potential Impacts:

Dos: Resource Consumption (Other) Varies By Context Read Application Data

All platforms may be affected

Likelihood of Exploit: Medium

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-49785