This vulnerability, identified as CWE-1329, involves Windows Secure Boot in Windows 10 Version 1607. An authorized attacker with high privileges can locally bypass a security feature because the system relies on a component that cannot be updated. The CVSS 3.1 base score is 7.9, indicating high severity, with impact on confidentiality and integrity but no impact on availability. Microsoft has published an official fix for this issue.

An authorized local attacker with high privileges can bypass a security feature in Windows Secure Boot, potentially compromising system confidentiality and integrity. There is no known impact on system availability. No known exploits are reported in the wild at this time.

An official fix is available from Microsoft. It is recommended to apply the security update provided in the Microsoft advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-48576 to remediate this vulnerability.