CVE-2026-20928CWE-212

CVE-2026-20928

Medium · published April 14, 2026

CVSS v3.1
4.6
EPSS
0%
Percentile
36.2
In the wild
Unconfirmed
What it is

Improper removal of sensitive information before storage or transfer in Windows Recovery Environment Agent allows an unauthorized attacker to bypass a security feature with a physical attack.

The record
Technical detail
CVSS v3.1
4.6 · MEDIUM
Vector
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00430 · 36.2th percentile
Weakness
CWE-212 · Improper Removal of Sensitive Information Before Storage or Transfer
Published
2026-04-14T22:16Z
Affected products (23)
ProductVersionsFixed in
microsoft/windows_10_1607< 10.0.14393.906010.0.14393.9060
microsoft/windows_10_1607< 10.0.14393.906010.0.14393.9060
microsoft/windows_10_1809< 10.0.17763.864410.0.17763.8644
microsoft/windows_10_1809< 10.0.17763.864410.0.17763.8644
microsoft/windows_10_21h2< 10.0.19044.718410.0.19044.7184
microsoft/windows_10_21h2< 10.0.19044.718410.0.19044.7184
microsoft/windows_10_21h2< 10.0.19044.718410.0.19044.7184
microsoft/windows_10_22h2< 10.0.19045.718410.0.19045.7184
microsoft/windows_10_22h2< 10.0.19045.718410.0.19045.7184
microsoft/windows_10_22h2< 10.0.19045.718410.0.19045.7184
microsoft/windows_11_23h2< 10.0.22631.693610.0.22631.6936
microsoft/windows_11_23h2< 10.0.22631.693610.0.22631.6936
microsoft/windows_11_24h2< 10.0.26100.824610.0.26100.8246
microsoft/windows_11_24h2< 10.0.26100.824610.0.26100.8246
microsoft/windows_11_25h2< 10.0.26200.824610.0.26200.8246
microsoft/windows_11_25h2< 10.0.26200.824610.0.26200.8246
microsoft/windows_11_26h1< 10.0.28000.183610.0.28000.1836
microsoft/windows_11_26h1< 10.0.28000.183610.0.28000.1836
microsoft/windows_server_2016< 10.0.14393.906010.0.14393.9060
microsoft/windows_server_2019< 10.0.17763.864410.0.17763.8644
microsoft/windows_server_2022< 10.0.20348.502010.0.20348.5020
microsoft/windows_server_2022_23h2< 10.0.25398.227410.0.25398.2274
microsoft/windows_server_2025< 10.0.26100.3269010.0.26100.32690
References (1)
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20928 · [email protected]
EPSS history
Timeline
  • 14 APR 16:57Z
    Windows Recovery Environment Security Feature Bypass Vulnerability
    cvelistv5