CVE-2026-77892: CWE-693: Protection Mechanism Failure in Microsoft Windows 10 Version 1607

This vulnerability (CVE-2026-77892) involves a protection mechanism failure (CWE-693) in the Windows Boot Manager component of Microsoft Windows 10 Version 1607 and other specified builds. It enables an attacker with physical access to the affected system to elevate privileges, potentially gaining high confidentiality, integrity, and availability impact. The CVSS 3.1 vector indicates the attack requires physical access (AV:P), low attack complexity (AC:L), no privileges required (PR:N), no user interaction (UI:N), and results in high impact on confidentiality, integrity, and availability. Microsoft has published an official fix for this vulnerability.

An attacker with physical access to an affected system can exploit this vulnerability to elevate privileges, potentially gaining full control over the system. This can lead to complete compromise of confidentiality, integrity, and availability of the affected system.

Microsoft has released an official fix for CVE-2026-77892. Users and administrators should apply the security updates provided by Microsoft as soon as possible to remediate this vulnerability. Refer to the Microsoft Security Response Center advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77892 for detailed patch information and update instructions.