CVE-2026-116638 | Microsoft Windows 10/11 Windows Recovery Environment improper authorization

October 26, 2026 Yanac

A vulnerability described as very critical has been identified in Microsoft Windows 10/11. Affected by this issue is some unknown functionality of the component Windows Recovery Environment. Executing a manipulation can lead to improper authorization.

This vulnerability is tracked as CVE-2026-116638. The attack is restricted to local execution. No exploit exists.VulDB Recent EntriesRead More