CVE-2026-25250

EUVD-2026-67240
EAZ EazyFix 12.9 allows a Security Feature Bypass related to a "Missing Cryptographic Step" associated with "Secure Boot disable."
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
6 MEDIUM
LOCAL
LOW
HIGH
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N
Awaiting analysis
This vulnerability is currently awaiting analysis.
Base Score
CVSS 3.x
EPSS Score
Percentile: 0.48%
Windows Releases
Platform
Version
Windows 10
1607 (x64, x86)
KB5082198
1809 (x64, x86)
KB5082123
21H2 (arm64, x64, x86)
KB5082200
22H2 (arm64, x64, x86)
KB5082200
Windows 11
23H2 (arm64, x64)
KB5082052
24H2 (arm64, x64)
KB5083769
25H2 (arm64, x64)
KB5083769
26H1 (arm64, x64)
KB5083768
Windows Server 2012
Server Core
KB5082127
Standard
KB5082127
Windows Server 2012 R2
Server Core
KB5082126
Standard
KB5082126
Windows Server 2016
Server Core
KB5082198
Standard
KB5082198
Windows Server 2019
Server Core
KB5082123
Standard
KB5082123
Windows Server 2022
23H2 Server Core
KB5082060
Server Core
KB5082142
Standard
KB5082142
Windows Server 2025
Server Core
KB5082063
Standard
KB5082063
Common Weakness Enumeration
References
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-25250
https://www.eazsolution.com/eazyfix.html