ID:12872 - Exploit for Missing Required Cryptographic Step in Microsoft Windows and Windows Server - CVE-2026-25250

 
Main Vulnerability Database Exploits ID:12872 - Exploit for Missing Required Cryptographic Step in Microsoft Windows and Windows Server - CVE-2026-25250

ID:12872 - Exploit for Missing Required Cryptographic Step in Microsoft Windows and Windows Server - CVE-2026-25250

Published: August 6, 2026


Vulnerability identifier: #VU126306
Vulnerability risk: Low
CVE-ID: CVE-2026-25250
CWE-ID: CWE-325
Exploitation vector: Local access
Vulnerable software:
Microsoft Windows
Windows Server

Link to public exploit:


Vulnerability description

The vulnerability allows a local user to compromsie the target system.

The vulnerability exists due to missing cryptographic step in Windows Secure Boot. A local administrator can bypass a security feature on the system.


Remediation

Install updates from vendor's website.