VulnSocial

CVE-2026-0390Active Exploitation(microsoft / windows_10_1607)

MEDIUMCVSS 6.7 · MEDIUM

Exploitation ongoing with high activity in latest observed window (1 mentions)

Immediate actions

  • Prioritize remediation for microsoft windows_10_1607 systems immediately
  • Assume compromise if assets are exposed
  • Track advisory updates for patch or workaround availability

Recommended action window: Immediate (within 24h)

NVD description

Reliance on untrusted inputs in a security decision in Windows Boot Loader allows an authorized attacker to bypass a security feature locally.

microsoft CVEsBack to dashboard
4.0/ 10 priority

Sources & remediation

Vendor / third-party advisories
Weakness type (CWE)
CWE-807

Priority

MEDIUM

Exploitation

ACTIVE

PoC

NONE

Patch

NONE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • windows_10_1607
  • windows_10_1809
  • windows_10_21h2
  • windows_10_22h2

Threat summary

  • Active exploitation appears in 1 classified signals
  • 2 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Active exploitation reported across 1 signal
  • Technical details provided in 2 signals
  • General: 1 classified signal
  • Peaked 1d ago at 1 mentions (2026-04-14); latest day: 1
  • 2 total mentions across 2 days

Affected systems

Vendors
microsoft
Products
windows_10_1607windows_10_1809windows_10_21h2windows_10_22h2windows_server_2016windows_server_2019windows_server_2022

Deep dive

Activity timeline2 mentions / 2d
00111Mentions · 2026-04-14: 1Mentions · 2026-04-17: 1Active Exploitation · 2026-04-14: 1Technical Details · 2026-04-14: 1Technical Details · 2026-04-17: 104-1404-17
Signal classification2 categories
Active Exploitation
150.0%
General
150.0%
Referenced assets2 URLs
Classification over time
DateTotalLabels
2026-04-141
Active Exploitation1
2026-04-171
General1
Full discourse2 posts
  • kawn@kawn2020
    Active Exploitation

    #windowsupdate #microsoft ●悪用可能性 －悪用の事実を確認済み：1 件 ・CVE-2026-32201　6.5　Microsoft Office SharePoint －悪用される可能性が高い：19 件 ・CVE-2026-0390 　6.7　Windows ブート ローダー ・CVE-2026-26151　7.1　Windows リモート デスクトップ … https://x.com/kawn2020/status/2044199643110949331

    Post summary

    The tweet confirms a real-world exploit for CVE-2026-32201 and flags 19 other CVEs as highly likely to be exploited, without providing PoC or patch information.

    10000366
    85 followersView on X
  • CVE@CVEnew
    General

    CVE-2026-0390 Reliance on untrusted inputs in a security decision in Windows Boot Loader allows an authorized attacker to bypass a security feature locally. https://www.cve.org/CVERecord?id=CVE-2026-0390

    Post summary

    CVE-2026-0390 describes a local bypass in the Windows Boot Loader due to untrusted inputs; no PoC, exploit, patch, or active exploitation is mentioned.

    00000112
    57.2K followersView on X
CPE platform detail13 entries

13 of 13 entries

PartVendorProductVersionTarget SWTarget HW
OSmicrosoftwindows_10_1607--x64
OSmicrosoftwindows_10_1607--x86
OSmicrosoftwindows_10_1809--x64
OSmicrosoftwindows_10_1809--x86
OSmicrosoftwindows_10_21h2--arm64
OSmicrosoftwindows_10_21h2--x64
OSmicrosoftwindows_10_21h2--x86
OSmicrosoftwindows_10_22h2--arm64
OSmicrosoftwindows_10_22h2--x64
OSmicrosoftwindows_10_22h2--x86
OSmicrosoftwindows_server_2016---
OSmicrosoftwindows_server_2019---
OSmicrosoftwindows_server_2022---

Explore more

Back to dashboardmicrosoft CVEswindows_10_1607 vulnerabilities