{"uuid": "80419bc7-7bc6-42d6-af0c-4fa33c2133ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-45585", "type": "seen", "source": "https://t.me/pphm_HackerNews/1650", "content": "\ud83d\udd34 Microsoft WinRE Vulnerability Allows Hackers to Bypass UEFI/BIOS Password Enforcement\n\nA newly disclosed vulnerability in the Microsoft Windows Recovery Environment (WinRE) could allow attackers to bypass UEFI and BIOS password protections, exposing systems to unauthorized access even when firmware-level security controls are active.\n\nThis issue, tracked under CERT/CC VU#226679 and associated with CVE-2026-45585, affects Windows 10 and Windows 11 systems that use WinRE for recovery and troubleshooting.", "creation_timestamp": "2026-08-22T00:00:27.323773Z"}