CVE-2026-20928 — Windows Recovery Environment Security Feature Bypass Vulnerability
Improper removal of sensitive information before storage or transfer in Windows Recovery Environment Agent allows an unauthorized attacker to bypass a security feature with a ph…
Published: 2026-04-14 · CVSS: 4.6 · CVSS 3.1
Improper removal of sensitive information before storage or transfer in Windows Recovery Environment Agent allows an unauthorized attacker to bypass a security feature with a physical attack.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7