CVE-2026-21265 | Microsoft Windows up to Server 2025 Secure Boot Certificate reliance on component that is not updateable

A vulnerability was found in Microsoft Windows. It has been declared as critical. This issue affects some unknown processing of the component Secure Boot Certificate. Such manipulation leads to reliance on component that is not updateable.

This vulnerability is referenced as CVE-2026-21265. The attack can only be performed from a local environment. No exploit is available.

A patch should be applied to remediate this issue.