Physical possession can cross an undisclosed Windows Boot Manager privilege boundary.

The trigger and gained authority are unknown; do not infer a Secure Boot or BitLocker defeat.

Sources

ResearchCVE-2026-77892 - Vulnerability Details - OpenCVE ResearchZero Day Initiative — The September 2026 Security Update Review

Copy link

Share this finding

Email Hacker News Reddit Mastodon Bluesky X LinkedIn Facebook Copy link

Read the full daily brief →

Every finding here carries a source that was checked before it published. If something is wrong, write to admin@fullchain.sh — corrections are published on the day they affect.

Thursday, September 10, 2026