Microsoft WinRE Vulnerability Allows Hackers to Bypass UEFI/BIOS Password Enforcement

Gbhackers •Divya • June 25, 2026

A newly disclosed vulnerability in the Microsoft Windows Recovery Environment (WinRE) could allow attackers to bypass UEFI and BIOS password protections, exposing systems to unauthorized access even when firmware-level security controls are active. This issue, tracked under CERT/CC VU#226679 and associated with CVE-2026-45585, affects Windows 10 and Windows 11 systems that use WinRE for recovery […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Microsoft WinRE Vulnerability Allows Bypass of UEFI/BIOS Passwords A vulnerability in Microsoft Windows Recovery Environment (WinRE) has been disclosed, allowing attackers to bypass UEFI and BIOS password protections. This issue, tracked as CERT/CC VU#226679 and CVE-2026-45585, affects Windows 10 and 11 systems utilizing WinRE for recovery. The flaw arises from inconsistencies in firmware security controls during recovery operations, potentially enabling unauthorized access for attackers with physical or administrative access. Scenarios resembling 'Evil Maid' attacks, where an attacker gains temporary physical access to a device, are particularly concerning. Organizations are advised not to rely solely on UEFI/BIOS passwords for security in environments where WinRE is accessible. As of now, the vulnerability has been publicly disclosed, but there are no reports of active exploitation. Security professionals should implement additional controls to mitigate risks associated with physical access and privileged-user attacks. 2 sources 55

Extracted Entities

Microsoft WinRE Vulnerability Allows Hackers to Bypass UEFI/BIOS Password Enforcement

The full story

Extracted Entities

CVEs (1)

CWE Weaknesses (1)

Platforms (1)

Vulnerabilities (1)