Files
vuln-nvd/data/2026/CVE-2026-0390.json
T

2 lines
6.0 KiB
JSON

{"affected":[{"affectedData":[{"platforms":["32-bit Systems","x64-based Systems"],"product":"Windows 10 Version 1607","vendor":"Microsoft","versions":[{"lessThan":"10.0.14393.9060","status":"affected","version":"10.0.14393.0","versionType":"custom"}]},{"platforms":["32-bit Systems","x64-based Systems"],"product":"Windows 10 Version 1809","vendor":"Microsoft","versions":[{"lessThan":"10.0.17763.8644","status":"affected","version":"10.0.17763.0","versionType":"custom"}]},{"platforms":["32-bit Systems","ARM64-based Systems","x64-based Systems"],"product":"Windows 10 Version 21H2","vendor":"Microsoft","versions":[{"lessThan":"10.0.19044.7184","status":"affected","version":"10.0.19044.0","versionType":"custom"}]},{"platforms":["32-bit Systems","ARM64-based Systems","x64-based Systems"],"product":"Windows 10 Version 22H2","vendor":"Microsoft","versions":[{"lessThan":"10.0.19045.7184","status":"affected","version":"10.0.19045.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows Server 2016","vendor":"Microsoft","versions":[{"lessThan":"10.0.14393.9060","status":"affected","version":"10.0.14393.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows Server 2016 (Server Core installation)","vendor":"Microsoft","versions":[{"lessThan":"10.0.14393.9060","status":"affected","version":"10.0.14393.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows Server 2019","vendor":"Microsoft","versions":[{"lessThan":"10.0.17763.8644","status":"affected","version":"10.0.17763.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows Server 2019 (Server Core installation)","vendor":"Microsoft","versions":[{"lessThan":"10.0.17763.8644","status":"affected","version":"10.0.17763.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows Server 2022","vendor":"Microsoft","versions":[{"lessThan":"10.0.20348.5020","status":"affected","version":"10.0.20348.0","versionType":"custom"}]}],"source":"secure@microsoft.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*","matchCriteriaId":"158C16A3-547E-4130-8428-8E429C37E573","versionEndExcluding":"10.0.14393.9060","vulnerable":true},{"criteria":"cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*","matchCriteriaId":"58E1A340-D49A-4EBB-A750-876922ACD5CA","versionEndExcluding":"10.0.14393.9060","vulnerable":true},{"criteria":"cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*","matchCriteriaId":"64248504-2307-45FC-8FF3-7A227CFD8675","versionEndExcluding":"10.0.17763.8644","vulnerable":true},{"criteria":"cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*","matchCriteriaId":"9B1465B1-BDE6-4634-8F12-43F71D68A4D6","versionEndExcluding":"10.0.17763.8644","vulnerable":true},{"criteria":"cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:arm64:*","matchCriteriaId":"88A175C4-E033-4FE7-B2BF-8BAE14321BC4","versionEndExcluding":"10.0.19044.7184","vulnerable":true},{"criteria":"cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:x64:*","matchCriteriaId":"86DBF14A-F486-4FE7-9126-D1D54952FC6C","versionEndExcluding":"10.0.19044.7184","vulnerable":true},{"criteria":"cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:x86:*","matchCriteriaId":"C375372B-D3D4-4B11-AAD8-69AC344C24BC","versionEndExcluding":"10.0.19044.7184","vulnerable":true},{"criteria":"cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:arm64:*","matchCriteriaId":"8CE2E268-E776-4697-9E43-33ABA4CDBE05","versionEndExcluding":"10.0.19045.7184","vulnerable":true},{"criteria":"cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:x64:*","matchCriteriaId":"269B8E88-6473-41DD-BA33-D9184B82CA58","versionEndExcluding":"10.0.19045.7184","vulnerable":true},{"criteria":"cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:x86:*","matchCriteriaId":"FCBB431B-EF21-4454-BDA3-D8F276BE7A64","versionEndExcluding":"10.0.19045.7184","vulnerable":true},{"criteria":"cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*","matchCriteriaId":"982DB0CA-5196-4E42-B2F7-994BE8179715","versionEndExcluding":"10.0.14393.9060","vulnerable":true},{"criteria":"cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*","matchCriteriaId":"647CF9B5-8898-469B-9C09-D372A7843187","versionEndExcluding":"10.0.17763.8644","vulnerable":true},{"criteria":"cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*","matchCriteriaId":"DC6837B7-5DFD-4AF7-B436-3C6FEF48BA60","versionEndExcluding":"10.0.20348.5020","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"Reliance on untrusted inputs in a security decision in Windows Boot Loader allows an authorized attacker to bypass a security feature locally."},{"lang":"es","value":"Dependencia de entradas no confiables en una decisión de seguridad en el Cargador de arranque de Windows permite a un atacante autorizado eludir una característica de seguridad localmente."}],"id":"CVE-2026-0390","lastModified":"2026-10-25T23:10:00.167","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":6.7,"baseSeverity":"MEDIUM","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"HIGH","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":0.8,"impactScore":5.9,"source":"secure@microsoft.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-0390","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2026-04-15T03:57:24.351150Z","version":"2.0.3"}}]},"published":"2026-04-14T18:16:42.237","references":[{"source":"secure@microsoft.com","tags":["Vendor Advisory"],"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-0390"}],"sourceIdentifier":"secure@microsoft.com","vulnStatus":"Analyzed","weaknesses":[{"description":[{"lang":"en","value":"CWE-807"}],"source":"secure@microsoft.com","type":"Secondary"}]}