{"id":"CVE-2026-109462","aliases":[],"cve":{"records":[{"id":"CVE-2026-109462","source":"microsoft","state":"PUBLISHED","reasons":[],"replacements":[],"disputed":false,"unsupportedWhenAssigned":false,"reserved":"2026-10-12T17:01:11.370Z","published":"2026-11-10T18:15:19.896Z","modified":"2026-11-13T18:04:14.176Z"}],"publishers":[{"name":"microsoft","role":"CNA","organizationId":"f38d906d-7342-40ea-92c1-6c4a2c6478c8","modified":"2026-11-13T18:04:14.176Z"},{"name":"CISA-ADP","role":"ADP","organizationId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","modified":"2026-11-10T21:51:58.920Z"}],"references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-109462","tags":["vendor-advisory","patch"],"source":"microsoft"}],"weaknesses":[{"id":"CWE-299","description":"CWE-299: Improper Check for Certificate Revocation","source":"microsoft"}],"applicability":[{"source":"microsoft","statements":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:azure_virtual_machines:*:*:*:*:*:*:*:*","versionStartIncluding":"0","versionEndExcluding":"2610"}]}]}]}],"prioritization":[{"source":"CISA-ADP","type":"SSVC","role":"CISA Coordinator","timestamp":"2026-11-10T21:48:32.134899Z","decisions":[{"name":"Exploitation","value":"none"},{"name":"Automatable","value":"no"},{"name":"Technical Impact","value":"partial"}]}]},"title":"Azure Firmware Security Feature Bypass Vulnerability","titleSource":"microsoft","descriptionSource":"microsoft","description":"Improper check for certificate revocation in Azure Firmware allows an authorized attacker to bypass a security feature locally.","score":4.4,"severity":"medium","published":"2026-11-10T18:15:19.896Z","modified":"2026-11-13T18:04:14.176Z","withdrawn":false,"knownExploited":false,"affected":[],"products":[{"vendor":"Microsoft","name":"Azure Virtual Machines","platforms":[],"versions":[{"version":"0","status":"affected","lessThan":"2610","versionType":"custom"}],"cpes":[],"source":"microsoft","url":"https://www.cve.org/CVERecord?id=CVE-2026-109462"}],"remediation":[],"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-109462"],"sources":[{"name":"CVE","id":"CVE-2026-109462","modified":"2026-11-13T18:04:14.176Z","url":"https://www.cve.org/CVERecord?id=CVE-2026-109462"}],"assessments":[{"source":"microsoft","vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C","score":4.4}],"sourceAffected":[],"observedAt":"2026-11-13T18:43:16.355Z","kev":{"status":"not-listed","checkedAt":"2026-11-15T03:00:33.317Z"},"coverage":[{"source":"NVD","status":"available","checkedAt":"2026-11-10T22:00:36.630Z","attemptedAt":"2026-11-10T22:00:36.630Z"},{"source":"GHSA","status":"available","checkedAt":"2026-11-10T22:00:33.969Z","attemptedAt":"2026-11-10T22:00:33.969Z"},{"source":"EUVD","status":"available","checkedAt":"2026-11-10T22:00:33.832Z","attemptedAt":"2026-11-10T22:00:33.832Z"},{"source":"EPSS","status":"no-result","checkedAt":"2026-11-10T22:00:33.730Z","attemptedAt":"2026-11-10T22:00:33.730Z"}],"evidence":[{"source":"ENISA EUVD","id":"EUVD-2026-121554","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-121554","modified":"Nov 10, 2026, 9:00:48 PM","score":4.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C","checkedAt":"2026-11-10T22:00:33.832Z"},{"source":"GitHub Advisory Database","id":"GHSA-wh2h-hhx6-gw5f","url":"https://github.com/advisories/GHSA-wh2h-hhx6-gw5f","modified":"2026-11-10T21:32:34Z","score":4.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N","checkedAt":"2026-11-10T22:00:33.969Z"},{"source":"NVD","id":"CVE-2026-109462","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109462","modified":"2026-11-10T21:18:04.940","score":4.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N","checkedAt":"2026-11-10T22:00:36.630Z"}],"aiSummary":{"text":"Azure Firmware has a security feature bypass vulnerability due to improper certificate revocation checks, allowing an authorized local attacker to bypass a security feature. Affected versions are less than 2610. The weakness is related to improper check for certificate revocation.","model":"@cf/meta/llama-3.3-70b-instruct-fp8-fast","generatedAt":"2026-11-10T18:36:02.109Z","sources":[{"name":"CVE","url":"https://www.cve.org/CVERecord?id=CVE-2026-109462"}]}}