This vulnerability, tracked as CVE-2026-48570 and classified under CWE-693 (Protection Mechanism Failure), affects Windows 10 Version 1607 (build 10.0.14393.0). It involves a failure in the Secure Boot protection mechanism that enables an authorized attacker with high privileges to bypass security features locally. The CVSS 3.1 score is 7.9 (high), reflecting local attack vector with low complexity, high privileges required, no user interaction, and impacts to confidentiality and integrity with no availability impact. Microsoft has published an official fix for this vulnerability.

An authorized local attacker with high privileges can bypass Windows Secure Boot protections, potentially compromising system confidentiality and integrity. This could allow unauthorized code execution or tampering with system components protected by Secure Boot. There is no known exploitation in the wild at this time.

An official fix is available from Microsoft. Users and administrators should apply the security update provided in the Microsoft advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-48570 to remediate this vulnerability.